8035 matches found
LARGO: Latent Adversarial Reflection through Gradient Optimization for Jailbreaking LLMs
Efficient red-teaming method to uncover vulnerabilities in Large Language Models LLMs is crucial. While recent attacks often use LLMs as optimizers, the discrete language space make gradient-based methods struggle. We introduce LARGO Latent Adversarial Reflection through Gradient Optimization, a...
PT-2025-30842 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel's RISC-V vector implementation related to context save and restore operations with xtheadvector. Previously, only registers v0-v7 were correctly saved...
The Tangent Space Attack
We propose a new method for retrieving the algebraic structure of a generic alternant code given an arbitrary generator matrix, provided certain conditions are met. We then discuss how this challenges the security of the McEliece cryptosystem instantiated with this family of codes. The central...
The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its ability to read data beyond the buffer limit in memory. This allows attackers to gain unauthorized access to protected information and circumvent the ASLR protection mechanism.
The vulnerability of Adobe After Effects’ video and dynamic image editing software relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and bypass the ASLR protection mechanism...
Alibaba Cloud Linux 3 : 0114: userspace graphics, xorg-x11, and mesa (ALINUX3-SA-2022:0114)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0114 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2020-14344: An integer overflow leadin...
The vulnerability of the Adobe Animate program for creating multimedia and computer animations lies in the ability to read data beyond the buffer in memory. This allows attackers to gain unauthorized access to protected information and circumvent the ASLR protection mechanism.
The vulnerability of the Adobe Animate program for creating multimedia and computer animations is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and bypass the ASLR protection mechanism...
The vulnerability of the Adobe Animate program for creating multimedia and computer animations lies in the ability to read data beyond the buffer in memory. This allows attackers to gain unauthorized access to protected information and circumvent the ASLR protection mechanism.
The vulnerability of the Adobe Animate program for creating multimedia and computer animations is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and bypass the ASLR protection mechanism...
ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
A flaw was found in Artifex Ghostscript's psi/zcolor.c component. This vulnerability allows arbitrary code execution via an unchecked implementation pointer in the Pattern color space...
Legion Space Code Execution Vulnerability - Lenovo Support US
No description provided...
ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
A flaw was found in Artifex Ghostscript's psi/zcolor.c component. This vulnerability allows arbitrary code execution via an unchecked implementation pointer in the Pattern color space...
kernel: jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
A flaw was found in the jbd2 component of the Linux kernel. When an input/output I/O error occurs during the journal cleanup process, the system may continue to wait for journal space that cannot be freed. This improper error handling can lead to a system becoming unresponsive or experiencing a...
kernel: nfsd: call cache_put if xdr_reserve_space returns NULL
A flaw was found in the Linux kernel's Network File System Daemon nfsd component. This vulnerability occurs when the system attempts to allocate buffer space but fails, yet a related lookup operation succeeds. This leads to a resource leak where a cache entry is acquired but not properly released...
kernel: vsock: prevent null-ptr-deref in vsock_*[has_data|has_space]
In the Linux kernel, the following vulnerability has been resolved: vsock: prevent null-ptr-deref in vsockhasdata|hasspace Recent reports have shown how we sometimes call vsockhasdata when a vsock socket has been de-assigned from a transport see attached links, but we shouldn't. Previous commits...
kernel: tpm: Clean up TPM space after command failure
A flaw was found in the Linux kernel's Trusted Platform Module TPM driver. When a TPM command transmission fails, the driver does not properly clean up allocated resources, leading to a leak of transient handles. This resource exhaustion can result in a denial of service, making the TPM device...
Microsoft PC Manager 后置链接漏洞
Microsoft PC Manager is a computer management software from Microsoft USA that allows one-click acceleration, system space management, pop-up window management, and full health check. Microsoft PC Manager suffers from a backlink vulnerability. An attacker can exploit this vulnerability to elevate...
ZIP Of Death (zip Bomb) Attack
MobSF is vulnerable to a ZIP of Death zip bomb Attack. The vulnerability is due to lack of checks on the total uncompressed size of uploaded ZIP files, allowing attackers to exhaust server disk space during extraction...
PT-2025-20751 · Apple · Macos Sonoma +3
Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.7.6 macOS Sequoia versions prior to 15.5 macOS Sonoma versions prior to 14.7.6 Description: The issue allows an app to bypass Address Space Layout Randomization ASLR, which is a security feature designed to...
Apple macOS 安全漏洞
Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple USA. A security vulnerability exists in Apple macOS that stems from an insufficient check that could cause an application to bypass ASLR...
SUSE CVE-2025-37880
In the Linux kernel, the following vulnerability has been resolved: um: work around schedyield not yielding in time-travel mode schedyield by a userspace may not actually cause scheduling in time-travel mode as no time has passed. In the case seen it appears to be a badly implemented userspace...