102 matches found
Linux Distros Unpatched Vulnerability : CVE-2021-39917
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9 before 14.3.6, all versions starting from 14.4 before 14.4.4, all version...
Linux Distros Unpatched Vulnerability : CVE-2021-3671
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ Ticket Granting Server - Request. An authenticated user...
Solaris 10 (i386): 152644-17
SunOS 5.10: Obsoleted by: 120544-38 SunOS 5.10x86: Apache 2.4 Patch. Date this patch was last updated by Sun : Jan/15/24 %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid255253;...
[SECURITY] Fedora 41 Update: suricata-7.0.11-1.fc41
The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine. This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. This new Engine supports Multi-threading, Automatic...
Security update for sqlite3
This update for sqlite3 fixes the following issues: Update to 3.50.2: Fix the concatws SQL function so that it includes empty strings in the concatenation. Avoid writing frames with no checksums into the wal file if a savepoint is rolled back after dirty pages have already been spilled into the w...
Google Chrome 134.0.6998.177 Sandbox Escape
This project is a research-oriented and educational simulation designed to demonstrate the concept of a sandbox escape vulnerability within Google Chrome version 134.0.6998.177. It leverages improper handle validation via the Mojo IPC system to illustrate how a malicious actor might attempt to...
Passive Hack-Back Strategies for Cyber Attribution: Covert Vectors in Denied Environment
Attributing cyberattacks remains a central challenge in modern cybersecurity, particularly within denied environments where defenders have limited visibility into attacker infrastructure and are restricted by legal or operational rules of engagement. This perspective examines the strategic value ...
Exploit for CVE-2024-47533
bash Reverse shell python3 CVE-2024-47533.py --url http://1...
Learning to Detect Unknown Jailbreak Attacks in Large Vision-Language Models: a Unified and Accurate Approach
Despite extensive alignment efforts, Large Vision-Language Models LVLMs remain vulnerable to jailbreak attacks, posing serious safety risks. Although recent detection works have shifted to internal representations due to their rich cross-modal information, most methods rely on heuristic rules...
Huawei EulerOS: Security Advisory for python3 (EulerOS-SA-2025-1862)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Malicious Windows Registration Entries (.reg) File
This module creates a Windows Registration Entries .reg file which adds the specified payload to the Windows Registry. The payload runs upon Windows login for the current user. If the user has elevated privileges when opening the file, the payload will run upon login when any user logs in. The us...
Challenges in GenAI and Authentication: a Scoping Review
Authentication and authenticity have been a security challenge since the beginning of information sharing, especially in the context of digital information. With the advancement of generative artificial intelligence, these challenges have evolved, demanding a more up-to-date analysis of their...
On Differential and Boomerang Properties of a Class of Binomials over Finite Fields of Odd Characteristic
In this paper, we investigate the differential and boomerang properties of a class of binomial $Fr,ux = x^r1 + uχx$ over the finite field $\mathbbFp^n$, where $r = \fracp^n+14$, $p^n \equiv 3 \pmod4$, and $χx = x^\fracp^n -12$ is the quadratic character in $\mathbbFp^n$. We show that $Fr,\pm1$ is...
Breaking Espressif’s ESP32 V3: Program Counter Control with Computed Values using Fault Injection
Espressif introduced the ESP32 V3, a low-cost System-on-Chip SoC with wireless connectivity, as a response to earlier hardware revisions that were susceptible to Fault Injection FI attacks. Despite its FI countermeasures, the authors of this paper are the first to bypass all security features of...
Security through the Eyes of AI: How Visualization Is Shaping Malware Detection
Malware, a persistent cybersecurity threat, increasingly targets interconnected digital systems such as desktop, mobile, and IoT platforms through sophisticated attack vectors. By exploiting these vulnerabilities, attackers compromise the integrity and resilience of modern digital ecosystems. To...
Unsourced Adversarial CAPTCHA: a Bi-Phase Adversarial CAPTCHA Framework
With the rapid advancements in deep learning, traditional CAPTCHA schemes are increasingly vulnerable to automated attacks powered by deep neural networks DNNs. Existing adversarial attack methods often rely on original image characteristics, resulting in distortions that hinder human...
Security update for apache2-mod_auth_openidc
This update for apache2-modauthopenidc fixes the following issues: CVE-2025-3891: Fixed denial of service via an empty POST request when OIDCPreservePost is enabled bsc1242015. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or...
Beyond Personalization: Federated Recommendation with Calibration Via Low-Rank Decomposition
Federated recommendation FR is a promising paradigm to protect user privacy in recommender systems. Distinct from general federated scenarios, FR inherently needs to preserve client-specific parameters, i.e., user embeddings, for privacy and personalization. However, we empirically find that...
OS Command Exec, Unix Command Shell, Bind TCP (via Perl)
Execute an OS command from PHP. Listen for a connection and spawn a command shell via perl Module Options msf use payload/php/unix/cmd/bindperl msf payloadbindperl show actions ...actions... msf payloadbindperl set ACTION msf payloadbindperl show options ...show and set options... msf...