On the Security Risks of ML-Based Malware Detection Systems: a Survey

Malware presents a persistent threat to user privacy and data integrity. To combat this, machine learning-based ML-based malware detection MD systems have been developed. However, these systems have increasingly been attacked in recent years, undermining their effectiveness in practice. While the...

MAL-2025-5127 Malicious code in requestpackat (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b70e437edd04a30f48e384a4a07cdb1790dcb5e6a66ba800dc1703bf845a6b36 Code download and runs an executable, which is widely recognized as malware. The system is also configured to run it on startup, and the file is saved in paths...

GHSA-CP9R-G575-XC5F Jenkins DingTalk Plugin Unconditionally Disables SSL/TLS Certificate and Hostname Validation

Jenkins DingTalk Plugin 2.7.3 and earlier unconditionally disables SSL/TLS certificate and hostname validation for connections to the configured DingTalk webhooks...

CVE-2025-4640 Out-of-bounds Write in pcl

Out-of-bounds Write vulnerability in PointCloudLibrary pcl allows Overflow Buffers. Since version 1.14.0, PCL by default uses a zlib installation from the system, unless the user sets WITHSYSTEMZLIB=FALSE. So this potential vulnerability is only relevant if the PCL version is older than 1.14.0 or...

CVE-2025-3877

Removed by vendor...

CVE-2025-46746

An administrator could discover another account's credentials...

PT-2025-21241 · Jenkins · Jenkins Dingtalk Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins DingTalk Plugin versions 2.7.3 and earlier Description: The issue concerns the unconditional disabling of SSL/TLS certificate and hostname validation for connections to the configured DingTalk webhooks. This affects the security of th...

Alibaba Cloud Linux 3 : 0188: openssh (ALINUX3-SA-2022:0188)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0188 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2018-20685: In OpenSSH 7.9, scp.c in t...

Alibaba Cloud Linux 3 : 0073: grafana (ALINUX3-SA-2021:0073)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2021:0073 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2020-11110: Grafana through 6.7.1 allo...

CVE-2025-29838 Windows ExecutionContext Driver Elevation of Privilege Vulnerability

...

CVE-2025-30383 Microsoft Excel Remote Code Execution Vulnerability

...

CVE-2025-30379 Microsoft Excel Remote Code Execution Vulnerability

...

CVE-2025-30377

CVE-2025-30377 is a Use-After-Free vulnerability in Microsoft Office that can lead to local code execution. Affected products span Microsoft Office components (Office 2016/2019/2021/365 families and related Office applications) with the root cause described as a use-after-free condition allowing ...

CVE-2025-30375 Microsoft Excel Remote Code Execution Vulnerability

...

CVE-2025-29976 Microsoft SharePoint Server Elevation of Privilege Vulnerability

...

Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to gunicorn-22.0.0-py3-none-any.whl CVE-2024-6827

Summary IBM Maximo Application Suite - Monitor Component is vulnerable to gunicorn-22.0.0-py3-none-any.whl CVE-2024-6827. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-6827 DESCRIPTION: Gunicorn version 21.2.0 does not properly...

GHSA-V9XG-688G-R69H vulnerabilities

Vulnerabilities for packages: chromium...

PT-2025-20649 · Unknown · Lumi H5P-Nodejs-Library

Name of the Vulnerable Software and Affected Versions: Lumi H5P-Nodejs-library versions prior to 9.3.3 Description: The issue is related to the omission of a sanitizeHtml call for plain text strings. This could potentially lead to security issues, although specific details about the estimated...

MAL-2025-6524 Malicious code in initer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d2aac1e40660cbe4323a93d03087f3b9a2d596a5dcfcf2bae3cb0a2ab37cf646 File is designed to download, hide under system-like name, and run a remote executable, widely identified as malicious. --- Category: MALICIOUS - The campaign...

MAL-2025-4231 Malicious code in pyiniter (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9f926429e9f976b0e3fe7deca152e047fef9ff22705a9e59cf492dab0397389d File is designed to download, hide under system-like name, and run a remote executable, widely identified as malicious. --- Category: MALICIOUS - The campaign...