13003 matches found
Malicious code in node-mongo-orm (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f411be6c895479c4587ef217ba34c6089de665249a67a929c3d1bad146ee7ea5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-5930 Malicious code in jsonslicer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7828f8e4816c129f466b6fffba2ed70b7560a9491a07ef71c158dd9a3029d54a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-5887 Malicious code in agent-configurator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e65ce26b3c1e446de253231422a7c11c3d90e68dcd8caab1efbdba56150e10a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @cpce/console-sub-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0e227ba31b179597ff26830a069bf360d8ce9ea5fe6ec81f517bd159dbb5d10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-5970 Malicious code in vitejs-plugin-refresh (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 243a4e663f29ec03aed634b87165dccaf6f345b2e1c92479b95ef6fd28474ba5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in js-prettier (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c09298c7090e31085be2d84c4a20270bccb912a70ec51629645b45d635b361b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-5925 Malicious code in js-0.8.3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 476e6142baf13923d3fdcbbfce1ea57ab2f62bf72a7c190d3213bbfa78364bfc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-5900 Malicious code in boost-chii-90 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a9518633beab55d7e221176d4550e41e83c9848a890b6ca4c77a384be7a2a17 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in neolang-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a41d15d10a19dc41dd5c801307932369ed7f51380fcc0fdb1478e0ac2b7ce9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-5923 Malicious code in iron-github-io (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2759ad6f6329e6837cebf29c50582adcc402d3ad085598b405b7005047b4d9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in webvieweventtest (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09cd6e6230cc73bbb40ce4f9ccd122eabff367f8c81c3586c848476a8e6900fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Hashed Watermark As a Filter: Defeating Forging and Overwriting Attacks in Weight-Based Neural Network Watermarking
As valuable digital assets, deep neural networks necessitate robust ownership protection, positioning neural network watermarking NNW as a promising solution. Among various NNW approaches, weight-based methods are favored for their simplicity and practicality; however, they remain vulnerable to...
TOTOLINK N300RB 8.54 Hidden Remote Support Feature
A hidden remote support feature protected by a static secret in TOTOLINK N300RB firmware version 8.54 allows an authenticated attacker to execute arbitrary OS commands with root privileges...
CVE-2024-38648
A hardcoded secret in Ivanti DSM before 2024.2 allows an authenticated attacker on an adjacent network to decrypt sensitive data including user credentials...
MAL-2025-5842 Malicious code in colortoolsv2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35da23355879f7db0f986508b2d2540d9d12942545cab651d9b50a9312d074ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Split Happens: Combating Advanced Threats with Split Learning and Function Secret Sharing
Split Learning SL -- splits a model into two distinct parts to help protect client data while enhancing Machine Learning ML processes. Though promising, SL has proven vulnerable to different attacks, thus raising concerns about how effective it may be in terms of data privacy. Recent works have...
FreeBSD : liboqs -- Secret-dependent branching in HQC (aeac223e-60e1-11f0-8baa-8447094a420f)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the aeac223e-60e1-11f0-8baa-8447094a420f advisory. The OpenQuantumSafe project reports: Secret-dependent branching in HQC reference implementation when...
CVE-2024-38648
A hardcoded secret in Ivanti DSM before 2024.2 allows an authenticated attacker on an adjacent network to decrypt sensitive data including user credentials...
