bbot-ui

BBOT TUI Viewer A self-contained terminal UI for browsing and analyzing BBOT scan results. Features 🚀 Zero Setup - Single self-installing file, no manual dependencies 🔴 Live Refresh - Auto-updates while scans are running with accurate status detection 🎯 Smart Status Detection - Accurately...

YARA-X 1.17.0

YARA-X is a re-incarnation of YARA, a pattern matching tool designed with malware researchers in mind. This new incarnation intends to be faster, safer and more user-friendly than its predecessor. The ultimate goal of YARA-X is replacing YARA as the default pattern matching tool for malware...

SALLIE: Safeguarding against Latent Language and Image Exploits

Large Language Models LLMs and Vision-Language Models VLMs remain highly vulnerable to textual and visual jailbreaks, as well as prompt injections arXiv:2307.15043, Greshake et al., 2023, arXiv:2306.13213. Existing defenses often degrade performance through complex input transformations or treat...

Malicious Package

Overview textual-sorter-lib is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in textual-sorter-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3afbb34c235a6e723240bd6cf03017355ea0a672b66fe36903bd1b7ef4fd050 The package textual-sorter-lib was found to contain malicious code. Source: ghsa-malware...

MAL-2026-317 Malicious code in textual-sorter-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3afbb34c235a6e723240bd6cf03017355ea0a672b66fe36903bd1b7ef4fd050 The package textual-sorter-lib was found to contain malicious code. Source: ghsa-malware...

EUVD-2026-3049

Malicious code in textual-sorter-lib npm...

Evaluation of Vision-LLMs in Surveillance Video

The widespread use of cameras in our society has created an overwhelming amount of video data, far exceeding the capacity for human monitoring. This presents a critical challenge for public safety and security, as the timely detection of anomalous or criminal events is crucial for effective...

EUVD-2021-10362

Malware in sbrugna...

When and Where Do Data Poisons Attack Textual Inversion?

Poisoning attacks pose significant challenges to the robustness of diffusion models DMs. In this paper, we systematically analyze when and where poisoning attacks textual inversion TI, a widely used personalization technique for DMs. We first introduce Semantic Sensitivity Maps, a novel method fo...

PROVSYN: Synthesizing Provenance Graphs for Data Augmentation in Intrusion Detection Systems

Provenance graph analysis plays a vital role in intrusion detection, particularly against Advanced Persistent Threats APTs, by exposing complex attack patterns. While recent systems combine graph neural networks GNNs with natural language processing NLP to capture structural and semantic features...

Con Instruction: Universal Jailbreaking of Multimodal Large Language Models Via Non-Textual Modalities

Existing attacks against multimodal language models MLLMs primarily communicate instructions through text accompanied by adversarial images. In contrast, we exploit the capabilities of MLLMs to interpret non-textual instructions, specifically, adversarial images or audio generated by our novel...

One Surrogate to Fool Them All: Universal, Transferable, and Targeted Adversarial Attacks with CLIP

Deep Neural Networks DNNs have achieved widespread success yet remain prone to adversarial attacks. Typically, such attacks either involve frequent queries to the target model or rely on surrogate models closely mirroring the target model -- often trained with subsets of the target model's traini...

A False Sense of Privacy: Evaluating Textual Data Sanitization beyond Surface-Level Privacy Leakage

Whitepaper called A False Sense Of Privacy: Evaluating Textual Data Sanitization Beyond Surface-Level Privacy Leakage...

Astra Linux – Vulnerability in Zabbix

The researcher has shown that due to the way the SNMP trap log is parsed, an attacker can create an SNMP trap with additional lines of information, causing forged data to appear in the Zabbix UI. This attack requires that SNMP authentication be disabled, and/or that the attacker knows the...

[SECURITY] Fedora 40 Update: sequence-library-1.0.3-18.fc40

A textual diff and merge library...

Ubuntu: Security Advisory (USN-5546-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-545F-PGP7-FWJF Log value insertion in craftercms

An anonymous user can craft a URL with text that ends up in the log viewer as is. The text can then include textual messages to mislead the administrator...

CVE-2021-23266

An anonymous user can craft a URL with text that ends up in the log viewer as is. The text can then include textual messages to mislead the administrator...

CVE-2021-23266

Crafter CMS (Crafter Studio) vulnerability CVE-2021-23266 allows anonymous users to craft a URL whose text is displayed verbatim in the log viewer, enabling misleading admin messages. Root cause: improper output neutralization for logs. Affected component: Crafter Studio log viewer. No remediatio...