bbot-ui

BBOT TUI 뷰어 BBOT 스캔 결과를 탐색하고 분석하기 위한 독립형 터미널 UI입니다. 기능 🚀 제로 설정 - 단일 자체 설치 파일, 수동 종속성 불필요 🔴 실시간 새로고침 - 스캔 실행 중 정확한 상태 감지로 자동 업데이트 🎯 스마트 상태 감지 - 실행 중, 완료, 중단 스캔을 정확하게 식별 📋 스캔 브라우저 - 취약점/발견 항목 수 및 상태 표시기가 포함된 여러 스캔 탐색 📦 아카이브 관리 - 오래된 스캔을 압축하여 공간 절약, 필요 시 복원 📝 작업 추적 - 취약점과 발견 항목에 상태, 우선순위, 메모 주석...

Astra Linux – Vulnerability in Zabbix

The researcher has shown that due to the way the SNMP trap log is parsed, an attacker can create an SNMP trap with additional lines of information, causing forged data to appear in the Zabbix UI. This attack requires that SNMP authentication be disabled, and/or that the attacker knows the...

HACK THE PLANET - a Terminal Extravaganza

A full-screen Textual TUI that mashes up the neon swagger of Hackers 1995, the grounded terminal realism of Mr. Robot, and the green digital rain of The Matrix...

📄 DCMTK 3.7.0 Unbounded Value Multiplicity Allocation

A proof of concept for an unbounded value multiplicity allocation vulnerability in DCMTK version 3.7.0. The vulnerability occurs when textual DICOM values are parsed into typed numeric arrays without validating the computed Value Multiplicity. An attacker can supply a crafted textual DICOM dump o...

TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models

Recent commercial image-generation models can generate high-quality images with readable text e.g., posters, infographics, and manuals, attracting considerable attention. Yet we first show that this same capability also introduces a previously unreported safety vulnerability: these systems may...

YARA-X 1.17.0

YARA-X is a re-incarnation of YARA, a pattern matching tool designed with malware researchers in mind. This new incarnation intends to be faster, safer and more user-friendly than its predecessor. The ultimate goal of YARA-X is replacing YARA as the default pattern matching tool for malware...

SALLIE: Safeguarding against Latent Language and Image Exploits

Large Language Models LLMs and Vision-Language Models VLMs remain highly vulnerable to textual and visual jailbreaks, as well as prompt injections arXiv:2307.15043, Greshake et al., 2023, arXiv:2306.13213. Existing defenses often degrade performance through complex input transformations or treat...

Malicious Package

Overview textual-sorter-lib is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in textual-sorter-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3afbb34c235a6e723240bd6cf03017355ea0a672b66fe36903bd1b7ef4fd050 The package textual-sorter-lib was found to contain malicious code. Source: ghsa-malware...

EUVD-2026-3049

Malicious code in textual-sorter-lib npm...

MAL-2026-317 Malicious code in textual-sorter-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3afbb34c235a6e723240bd6cf03017355ea0a672b66fe36903bd1b7ef4fd050 The package textual-sorter-lib was found to contain malicious code. Source: ghsa-malware...

Evaluation of Vision-LLMs in Surveillance Video

The widespread use of cameras in our society has created an overwhelming amount of video data, far exceeding the capacity for human monitoring. This presents a critical challenge for public safety and security, as the timely detection of anomalous or criminal events is crucial for effective...

EUVD-2021-10362

Malware in sbrugna...

When and Where Do Data Poisons Attack Textual Inversion?

Poisoning attacks pose significant challenges to the robustness of diffusion models DMs. In this paper, we systematically analyze when and where poisoning attacks textual inversion TI, a widely used personalization technique for DMs. We first introduce Semantic Sensitivity Maps, a novel method fo...

PROVSYN: Synthesizing Provenance Graphs for Data Augmentation in Intrusion Detection Systems

Provenance graph analysis plays a vital role in intrusion detection, particularly against Advanced Persistent Threats APTs, by exposing complex attack patterns. While recent systems combine graph neural networks GNNs with natural language processing NLP to capture structural and semantic features...

Con Instruction: Universal Jailbreaking of Multimodal Large Language Models Via Non-Textual Modalities

Existing attacks against multimodal language models MLLMs primarily communicate instructions through text accompanied by adversarial images. In contrast, we exploit the capabilities of MLLMs to interpret non-textual instructions, specifically, adversarial images or audio generated by our novel...

One Surrogate to Fool Them All: Universal, Transferable, and Targeted Adversarial Attacks with CLIP

Deep Neural Networks DNNs have achieved widespread success yet remain prone to adversarial attacks. Typically, such attacks either involve frequent queries to the target model or rely on surrogate models closely mirroring the target model -- often trained with subsets of the target model's traini...

A False Sense of Privacy: Evaluating Textual Data Sanitization beyond Surface-Level Privacy Leakage

Whitepaper called A False Sense Of Privacy: Evaluating Textual Data Sanitization Beyond Surface-Level Privacy Leakage...

[SECURITY] Fedora 40 Update: sequence-library-1.0.3-18.fc40

A textual diff and merge library...

Ubuntu: Security Advisory (USN-5546-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...