21220 matches found
How Can We Effectively Use LLMs for Phishing Detection?: Evaluating the Effectiveness of Large Language Model-Based Phishing Detection Models
Large language models LLMs have emerged as a promising phishing detection mechanism, addressing the limitations of traditional deep learning-based detectors, including poor generalization to previously unseen websites and a lack of interpretability. However, LLMs' effectiveness for phishing...
pH7 Social Dating Builder security vulnerability
pH7 Social Dating Builder is an open source social dating system from pH7 Social Dating CMS pH7CMS. A security vulnerability exists in pH7 Social Dating Builder version 17.9.1, which stems from the messaging system not cleaning up user submissions and could lead to a stored cross-site scripting...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not truncating the first page in the wrong path, which could lead to a kernel bug...
GHSA-MGRM-G92Q-F8H8
creationtimestamp| type| source ---|---|--- 2025-11-11 17:50:55+00:00| seen| https://seclists.org/oss-sec/2025/q4/164...
MAL-2025-138579 Malicious code in warnermedia-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 235c7d43006e41c31c3b06069239c483934cee515a1f489c55e698fdf994909e The OpenSSF Package Analysis project identified 'warnermedia-test' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
EUVD-2025-90449
Malicious code in lina-bubur41-miaww npm...
EUVD-2025-89137
Malicious code in riana-taiwan29-miaww npm...
EUVD-2025-50963
Malicious code in xerothermic-coffee-gorilla npm...
EUVD-2025-54117
Malicious code in glamorous-silver-yak npm...
KLA90059 Multiple vulnerability in Microsoft Open Source Software
A remote code execution vulnerability was found in Microsoft Open Source Software. Malicious users can exploit this vulnerability to execute arbitrary code, bypass security restrictions. Original advisories CVE-2025-62220 Exploitation Public exploits exist for this vulnerability. Related products...
[SECURITY] Fedora 43 Update: chromium-142.0.7444.134-1.fc43
Chromium is an open-source web browser, powered by WebKit Blink...
Falco 0.42.1
Sysdig Falco is a behavioral activity monitoring agent that is open source and comes with native support for containers. Falco lets you define highly granular rules to check for activities involving file and network activity, process execution, IPC, and much more, using a flexible syntax. Falco...
[SECURITY] Fedora 42 Update: singularity-ce-4.3.4-1.fc42
SingularityCE is the Community Edition of Singularity, an open source container platform designed to be simple, fast, and secure...
[SECURITY] Fedora 43 Update: singularity-ce-4.3.4-1.fc43
SingularityCE is the Community Edition of Singularity, an open source container platform designed to be simple, fast, and secure...
OSV-2025-884 Heap-use-after-free in JS_DefineProperty
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=458199402 Crash type: Heap-use-after-free READ 8 Crash state: JSDefineProperty buildbacktrace JSCallInternal...
Cryptographic Binding Should Not Be Optional: A Formal-Methods Analysis of FIDO UAF Channel Binding
As a case study in cryptographic binding, we present a formal-methods analysis of the cryptographic channel binding mechanisms in the Fast IDentity Online FIDO Universal Authentication Framework UAF authentication protocol, which seeks to reduce the use of traditional passwords in favor of...
EUVD-2025-38341
CVAT is an open source interactive video and image annotation tool for computer vision. In versions 2.4.0 through 2.48.1, a malicious CVAT user with at least the User global role may create files in the root of the mounted file share, or overwrite existing files. If no file share is mounted, the...
CVE-2025-63585
OSSN Open Source Social Network 8.6 is vulnerable to SQL Injection in /action/rtcomments/status via the timestamp parameter...