Revisiting Third-Party Library Detection: a Ground Truth Dataset and Its Implications across Security Tasks

Accurate detection of third-party libraries TPLs is fundamental to Android security, supporting vulnerability tracking, malware detection, and supply chain auditing. Despite many proposed tools, their real-world effectiveness remains unclear.We present the first large-scale empirical study of ten...

wifi: mt76: mt7921s: fix potential hung tasks during chip recovery

...

Mind the Gap: Time-Of-Check to Time-Of-Use Vulnerabilities in LLM-Enabled Agents

Large Language Model LLM-enabled agents are rapidly emerging across a wide range of applications, but their deployment introduces vulnerabilities with security implications. While prior work has examined prompt-based attacks e.g., prompt injection and data-oriented threats e.g., data exfiltration...

CVE-2025-45313

A cross-site scripting XSS vulnerability in the /tasks endpoint of hortusfox-web v4.4 allows attackers to execute arbitrary JavaScript in the context of a user's browser via a crafted payload injected into the title parameter...

Linux Distros Unpatched Vulnerability : CVE-2025-21892

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/mlx5: Fix the recovery flow of the UMR QP This patch addresses an issue in the recovery flow of the UMR QP, ensuring tasks do not get stuck, as highlighted...

Malicious code in aws-gulp-tasks (npm)

The package aws-gulp-tasks was found to contain malicious code...

Malicious code in humanapi-grunt-tasks (npm)

The package humanapi-grunt-tasks was found to contain malicious code...

Malicious code in maintenance_tasks (npm)

The package maintenancetasks was found to contain malicious code...

MAL-2025-22790 Malicious code in humanapi-grunt-tasks (npm)

The package humanapi-grunt-tasks was found to contain malicious code...

MAL-2025-9270 Malicious code in @ruby-team/sst-tasks (npm)

The package @ruby-team/sst-tasks was found to contain malicious code...

Malicious code in fear-core-tasks (npm)

The package fear-core-tasks was found to contain malicious code...

MAL-2025-20341 Malicious code in fear-core-tasks (npm)

The package fear-core-tasks was found to contain malicious code...

MAL-2025-15226 Malicious code in aws-gulp-tasks (npm)

The package aws-gulp-tasks was found to contain malicious code...

MAL-2025-36528 Malicious code in test-mlw2-tweel-tasks-chank-mavis (npm)

The package test-mlw2-tweel-tasks-chank-mavis was found to contain malicious code...

MAL-2025-25797 Malicious code in maintenance_tasks (npm)

The package maintenancetasks was found to contain malicious code...

MAL-2025-32904 Malicious code in sedona-angular-gulp-tasks (npm)

The package sedona-angular-gulp-tasks was found to contain malicious code...

CVE-2025-45313

A cross-site scripting XSS vulnerability in the /tasks endpoint of hortusfox-web v4.4 allows attackers to execute arbitrary JavaScript in the context of a user's browser via a crafted payload injected into the title parameter...

HortusFox 安全漏洞

HortusFox is a free and open source self-hosted plant manager system from HortusFox, Inc. A security vulnerability exists in HortusFox v4.4 that stems from a cross-site scripting attack due to misuse of the parameter title in the /tasks endpoint...

CVE-2025-45313

A cross-site scripting XSS vulnerability in the /tasks endpoint of hortusfox-web v4.4 allows attackers to execute arbitrary JavaScript in the context of a user's browser via a crafted payload injected into the title parameter...

CVE-2025-45313

A cross-site scripting (XSS) vulnerability exists in the /tasks endpoint of hortusfox-web v4.4 . The root cause is the misuse of the title parameter , which allows an attacker to inject a crafted payload and execute arbitrary JavaScript in the context of a user's browser. As a temporary workaroun...