427 matches found
CVE-2025-66109
The supplied connected data confirm a Missing Authorization / Broken Access Control vulnerability in the WordPress Cart Weight for WooCommerce plugin, affecting versions
PT-2025-47771
Missing Authorization vulnerability in octolize Cart Weight for WooCommerce woo-cart-weight allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cart Weight for WooCommerce: from n/a through = 1.9.11...
WordPress plugin Cart Weight for WooCommerce 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A missing authorization vulnerability exists in the WordPress Cart Weight for WooCommerce plugin, which can be exploited by an attacker to leverage a misconfigured access contro...
Cisco Finds Open-Weight AI Models Easy to Exploit in Long Chats
Cisco’s new research shows that open-weight AI models, while driving innovation, face serious security risks as multi-turn attacks, including conversational persistence, can bypass safeguards and expose data...
kernel: net: let net.core.dev_weight always be non-zero
In the Linux kernel, the following vulnerability has been resolved: net: let net.core.devweight always be non-zero The following problem was encountered during stability test: NULL netdevice: NAPI poll function processbacklog+0x0/0x530 \ returned 1, exceeding its budget of 0. ------------ cut her...
Enhancing Deep Learning-Based Rotational-XOR Attacks on Lightweight Block Ciphers Simon32/64 and Simeck32/64
At CRYPTO 2019, Gohr pioneered neural cryptanalysis by introducing differential-based neural distinguishers to attack Speck32/64, establishing a novel paradigm combining deep learning with differential cryptanalysis.Since then, constructing neural distinguishers has become a significant approach ...
From Model to Breach: Towards Actionable LLM-Generated Vulnerabilities Reporting
As the role of Large Language Models LLM-based coding assistants in software development becomes more critical, so does the role of the bugs they generate in the overall cybersecurity landscape. While a number of LLM code security benchmarks have been proposed alongside approaches to improve the...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988986)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988986 advisory. In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd KASAN reports a use-after-fr...
CodeAstro Gym Management System SQL注入漏洞
CodeAstro Gym Management System is a gym management system from CodeAstro. A SQL injection vulnerability exists in CodeAstro Gym Management System version 1.0, which stems from incorrect manipulation of the parameter id/iniweight in the file /admin/update-progress.php, which could lead to a SQL...
REx86: A Local Large Language Model for Assisting in X86 Assembly Reverse Engineering
Reverse engineering RE of x86 binaries is indispensable for malware and firmware analysis, but remains slow due to stripped metadata and adversarial obfuscation. Large Language Models LLMs offer potential for improving RE efficiency through automated comprehension and commenting, but cloud-hosted...
Regular Expression Denial Of Service (ReDoS)
transformers is vulnerable to a Regular Expression Denial Of Service ReDoS. The vulnerability is due to the douseweightdecay method in the AdamWeightDecay optimizer processing user-controlled regular expressions in the includeinweightdecay and excludefromweightdecay lists, which allows an attacke...
EUVD-2006-1256
Malware in sbrugna...
EUVD-2018-2563
Malware in sbrugna...
EUVD-2017-3191
Malware in sbrugna...
EUVD-2020-0192
Malware in sbrugna...
EUVD-2018-11270
Malware in sbrugna...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987041)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987041 advisory. In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd KASAN reports a use-after-fr...
EUVD-2023-41289
Malicious code in bioql PyPI...