Lucene search
+L

2766 matches found

Github Security Blog
Github Security Blog
•added 2026/01/07 6:36 p.m.•26 views

RustFS gRPC GetMetrics deserialization panic enables remote DoS

Summary A malformed gRPC GetMetrics request causes getmetrics to unwrap failed deserialization of metrictype/opts, panicking the handler thread and enabling remote denial of service of the metrics endpoint. Details - Vulnerable code: rustfs/src/storage/tonicservice.rs:1775-1782: - MetricType and...

6.9CVSS5.9AI score0.00337EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2026/01/07 6:36 p.m.•15 views

GHSA-GW2X-Q739-QHCR RustFS gRPC GetMetrics deserialization panic enables remote DoS

Summary A malformed gRPC GetMetrics request causes getmetrics to unwrap failed deserialization of metrictype/opts, panicking the handler thread and enabling remote denial of service of the metrics endpoint. Details - Vulnerable code: rustfs/src/storage/tonicservice.rs:1775-1782: - MetricType and...

6.9CVSS6.8AI score0.00337EPSS
SaveExploits1References4
Packet Storm News
Packet Storm News
•added 2026/01/07 12:00 a.m.•39 views

Jailbreaking LLMs and VLMs: Mechanisms, Evaluation, and Unified Defense

This paper provides a systematic survey of jailbreak attacks and defenses on Large Language Models LLMs and Vision-Language Models VLMs, emphasizing that jailbreak vulnerabilities stem from structural factors such as incomplete training data, linguistic ambiguity, and generative uncertainty. It...

7.3AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/01/07 12:00 a.m.•15 views

PT-2026-1935

Name of the Vulnerable Software and Affected Versions RustFS versions 1.0.0-alpha.13 through 1.0.0-alpha.77 Description RustFS is a distributed object storage system built in Rust. A malformed gRPC GetMetrics request can cause the get metrics function to fail during deserialization of metric...

6.9CVSS6.8AI score0.00337EPSS
SaveExploits1References5
Snyk
Snyk
•added 2026/01/06 3:42 a.m.•13 views

Malicious Package

Overview n8n-performance-metrics is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

9.8CVSS6.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/01/06 3:42 a.m.•14 views

Malicious Package

Overview n8n-nodes-performance-metrics is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS6.8AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/06 3:42 a.m.•14 views

Malicious code in n8n-performance-metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff33e7eec92ad0ad734fb7babcf427a9a5df69ba94b95c904c1ecfce32d5ef97 The package n8n-performance-metrics was found to contain malicious code. Source: ghsa-malware...

6.9AI score
SaveExploits0References1
EUVD
EUVD
•added 2026/01/06 3:42 a.m.•9 views

EUVD-2026-1131

Malicious code in n8n-nodes-performance-metrics npm...

6.6AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/01/06 3:42 a.m.•24 views

Malicious code in n8n-nodes-performance-metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector decf8fbf4cfd483a5fc72a3c3037f88de636f0732e3d591a09309e54faceff05 The package n8n-nodes-performance-metrics was found to contain malicious code. Source: ghsa-malware...

6.9AI score
SaveExploits0References1
EUVD
EUVD
•added 2026/01/06 3:42 a.m.•11 views

EUVD-2026-1130

Malicious code in n8n-performance-metrics npm...

6.6AI score
SaveExploits0References1
OSV
OSV
•added 2026/01/06 3:42 a.m.•17 views

MAL-2026-69 Malicious code in n8n-performance-metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff33e7eec92ad0ad734fb7babcf427a9a5df69ba94b95c904c1ecfce32d5ef97 The package n8n-performance-metrics was found to contain malicious code. Source: ghsa-malware...

6.8AI score
SaveExploits0References1
OSV
OSV
•added 2026/01/06 3:42 a.m.•10 views

MAL-2026-68 Malicious code in n8n-nodes-performance-metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector decf8fbf4cfd483a5fc72a3c3037f88de636f0732e3d591a09309e54faceff05 The package n8n-nodes-performance-metrics was found to contain malicious code. Source: ghsa-malware...

6.8AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2026/01/06 12:00 a.m.•21 views

The vulnerability of the Cluster Metrics Handler component in the toolkit for creating highly competitive, distributed, and fault-tolerant applications allows a hacker to execute remote code.

The vulnerability of the Cluster Metrics Handler component in the Akka toolset for creating highly competitive, distributed, and fault-tolerant applications is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary cod...

6CVSS6.1AI score0.00224EPSS
SaveExploits0References2Affected Software1
Packet Storm News
Packet Storm News
•added 2026/01/05 12:00 a.m.•19 views

Threat Detection in Social Media Networks Using Machine Learning Based Network Analysis

The accelerated development of social media websites has posed intricate security issues in cyberspace, where these sites have increasingly become victims of criminal activities including attempts to intrude into them, abnormal traffic patterns, and organized attacks. The conventional rule-based...

7AI score
SaveExploits0
Veeam
Veeam
•added 2026/01/05 12:00 a.m.•40 views

Kasten Prometheus Export via remote_write

Purpose Kasten now supports exporting metrics from the embedded Prometheus to external backends using Prometheus's remotewrite capability. This feature supports the collection, aggregation, and visualization of cluster and multi-cluster metrics in monitoring tools like Grafana Cloud and Datadog...

7.3AI score
SaveExploits0
Packet Storm News
Packet Storm News
•added 2026/01/02 12:00 a.m.•21 views

Emoji-Based Jailbreaking of Large Language Models

Large Language Models LLMs are integral to modern AI applications, but their safety alignment mechanisms can be bypassed through adversarial prompt engineering. This study investigates emoji-based jailbreaking, where emoji sequences are embedded in textual prompts to trigger harmful and unethical...

7.2AI score
SaveExploits0
Packet Storm News
Packet Storm News
•added 2025/12/31 12:00 a.m.•21 views

Towards Eco Friendly Cybersecurity: Machine Learning Based Anomaly Detection with Carbon and Energy Metrics

The rising energy footprint of artificial intelligence has become a measurable component of US data center emissions, yet cybersecurity research seldom considers its environmental cost. This study introduces an eco aware anomaly detection framework that unifies machine learning based network...

6.9AI score
SaveExploits0
OSV
OSV
•added 2025/12/30 1:16 p.m.•14 views

UBUNTU-CVE-2023-54202

In the Linux kernel, the following vulnerability has been resolved: drm/i915: fix race condition UAF in i915perfaddconfigioctl Userspace can guess the id value and try to race oaconfig object creation with config remove, resulting in a use-after-free if we dereference the object after unlocking t...

7.8CVSS7AI score0.0015EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2025/12/30 12:09 p.m.•38 views

CVE-2023-54202 drm/i915: fix race condition UAF in i915_perf_add_config_ioctl

In the Linux kernel, the following vulnerability has been resolved: drm/i915: fix race condition UAF in i915perfaddconfigioctl Userspace can guess the id value and try to race oaconfig object creation with config remove, resulting in a use-after-free if we dereference the object after unlocking t...

7.8CVSS0.0015EPSS
SaveExploits0References4
OSV
OSV
•added 2025/12/30 11:10 a.m.•29 views

OESA-2025-2882 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved:tcpmetrics: validate source addr lengthI don t see anything checking that TCPMETRICSATTRSADDRIPV4is at least 4 bytes long, and the policy doesn t have an entryfor...

7.8CVSS6.6AI score0.00376EPSS
SaveExploits0References18
Rows per page
Query Builder