The Role of Learning in Attacking Intrusion Detection Systems

Recent work on network attacks have demonstrated that ML-based network intrusion detection systems NIDS can be evaded with adversarial perturbations. However, these attacks rely on complex optimizations that have large computational overheads, making them impractical in many real-world settings. ...

LLM-FS: Zero-Shot Feature Selection for Effective and Interpretable Malware Detection

Feature selection FS remains essential for building accurate and interpretable detection models, particularly in high-dimensional malware datasets. Conventional FS methods such as Extra Trees, Variance Threshold, Tree-based models, Chi-Squared tests, ANOVA, Random Selection, and Sequential...

When Handshakes Tell the Truth: Detecting Web Bad Bots Via TLS Fingerprints

Automated traffic continued to surpass human-generated traffic on the web, and a rising proportion of this automation was explicitly malicious. Evasive bots could pretend to be real users, even solve Captchas and mimic human interaction patterns. This work explores a less intrusive, protocol-leve...

Rethinking Security of Diffusion-Based Generative Steganography

Generative image steganography is a technique that conceals secret messages within generated images, without relying on pre-existing cover images. Recently, a number of diffusion model-based generative image steganography DM-GIS methods have been introduced, which effectively combat traditional...

SAFuzz: Semantic-Guided Adaptive Fuzzing for LLM-Generated Code

While AI-coding assistants accelerate software development, current testing frameworks struggle to keep pace with the resulting volume of AI-generated code. Traditional fuzzing techniques often allocate resources uniformly and lack semantic awareness of algorithmic vulnerability patterns, leading...

org.keycloak:keycloak-dependencies-server-min (4.0.0.final), org.keycloak:keycloak-model-jpa (4.0.0.final) +2 more potentially affected by CVE-2026-1486 via org.keycloak:keycloak-services (4.0.0.final)

org.keycloak:keycloak-services MAVEN version 4.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-min 4.0.0.final - org.keycloak:keycloak-model-jpa...

org.keycloak:keycloak-dependencies-server-min (4.2.1.final), org.keycloak:keycloak-model-jpa (4.2.1.final) +2 more potentially affected by CVE-2026-1529 via org.keycloak:keycloak-services (4.2.1.final)

org.keycloak:keycloak-services MAVEN version 4.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-min 4.2.1.final - org.keycloak:keycloak-model-jpa...

org.keycloak:keycloak-dependencies-server-min (4.0.0.beta2), org.keycloak:keycloak-model-jpa (4.0.0.beta2) +2 more potentially affected by CVE-2025-14778 via org.keycloak:keycloak-services (4.0.0.beta2)

org.keycloak:keycloak-services MAVEN version 4.0.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-min 4.0.0.beta2 - org.keycloak:keycloak-model-jpa...

com.github.vzakharchenko:chillispot-radius-plugin (1.4.3), com.github.vzakharchenko:cisco-radius-plugin (1.4.3) +24 more potentially affected by CVE-2026-1486 via org.keycloak:keycloak-services (17.0.1)

org.keycloak:keycloak-services MAVEN version 17.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.4.3 -...

org.keycloak:keycloak-authz-policy-drools (2.2.0.cr1), org.keycloak:keycloak-dependencies-server-all (2.2.0.cr1) +4 more potentially affected by CVE-2025-14778 via org.keycloak:keycloak-services (2.2.0.cr1)

org.keycloak:keycloak-services MAVEN version 2.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 2.2.0.cr1 -...

org.keycloak:keycloak-account-freemarker (1.0-alpha-4), org.keycloak:keycloak-login-freemarker (1.0-alpha-4) +1 more potentially affected by CVE-2026-1486 via org.keycloak:keycloak-services (1.0-alpha-4)

org.keycloak:keycloak-services MAVEN version 1.0-alpha-4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.0-alpha-4 - org.keycloak:keycloak-login-freemarker...

org.keycloak:keycloak-account-freemarker (1.0-alpha-3), org.keycloak:keycloak-login-freemarker (1.0-alpha-3) +1 more potentially affected by CVE-2025-14778 via org.keycloak:keycloak-services (1.0-alpha-3)

org.keycloak:keycloak-services MAVEN version 1.0-alpha-3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.0-alpha-3 - org.keycloak:keycloak-login-freemarker...

org.keycloak:keycloak-dependencies-server-all (1.9.2.final), org.keycloak:keycloak-dependencies-server-min (1.9.2.final) +2 more potentially affected by CVE-2026-1486 via org.keycloak:keycloak-services (1.9.2.final)

org.keycloak:keycloak-services MAVEN version 1.9.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-all 1.9.2.final -...

org.keycloak:keycloak-authz-policy-drools (7.0.1), org.keycloak:keycloak-dependencies-server-all (7.0.1) +6 more potentially affected by CVE-2025-14778 via org.keycloak:keycloak-services (7.0.1)

org.keycloak:keycloak-services MAVEN version 7.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 7.0.1 - org.keycloak:keycloak-dependencies-server-all 7.0...

org.keycloak:keycloak-account-freemarker (1.0-beta-1-20150523), org.keycloak:keycloak-login-freemarker (1.0-beta-1-20150523) +1 more potentially affected by CVE-2025-14778 via org.keycloak:keycloak-services (1.0-beta-1-20150523)

org.keycloak:keycloak-services MAVEN version 1.0-beta-1-20150523 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-account-freemarker 1.0-beta-1-20150523 -...

org.keycloak:keycloak-dependencies-server-min (4.2.1.final), org.keycloak:keycloak-model-jpa (4.2.1.final) +2 more potentially affected by CVE-2026-1486 via org.keycloak:keycloak-services (4.2.1.final)

org.keycloak:keycloak-services MAVEN version 4.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-dependencies-server-min 4.2.1.final - org.keycloak:keycloak-model-jpa...

com.github.vzakharchenko:keycloak-plugins (1.2.2), com.github.vzakharchenko:mikrotik-radius-plugin (1.2.2) +13 more potentially affected by CVE-2026-1486 via org.keycloak:keycloak-services (9.0.2)

org.keycloak:keycloak-services MAVEN version 9.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:keycloak-plugins 1.2.2 - com.github.vzakharchenko:mikrotik-radius-plugin...

com.github.vzakharchenko:cisco-radius-plugin (1.2.5), com.github.vzakharchenko:keycloak-plugins (1.2.5) +15 more potentially affected by CVE-2026-1529 via org.keycloak:keycloak-services (10.0.2)

org.keycloak:keycloak-services MAVEN version 10.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:cisco-radius-plugin 1.2.5 - com.github.vzakharchenko:keycloak-plugins 1.2...

org.keycloak:keycloak-authz-policy-drools (3.4.1.cr1), org.keycloak:keycloak-dependencies-server-all (3.4.1.cr1) +6 more potentially affected by CVE-2025-14778 via org.keycloak:keycloak-services (3.4.1.cr1)

org.keycloak:keycloak-services MAVEN version 3.4.1.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - org.keycloak:keycloak-authz-policy-drools 3.4.1.cr1 -...

io.github.johnjcool:keycloak-cas-services (>=4.3.0.final, <=4.3.1.final), org.keycloak:keycloak-dependencies-server-min (4.3.0.final) +3 more potentially affected by CVE-2026-1486 via org.keycloak:keycloak-services (4.3.0.final)

org.keycloak:keycloak-services MAVEN version 4.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - io.github.johnjcool:keycloak-cas-services =4.3.0.final, =4.3.1.final -...