696 matches found
PT-2025-34448 · Mouse07410 · Asn1C
Name of the Vulnerable Software and Affected Versions: mouse07410 asn1c versions through 0.9.29 Description: An issue was discovered in decoders generated by asn1c. When using UPER Unaligned Packed Encoding Rules, the decoders fail to enforce constraints on INTEGER values if the positive bound...
CVE-2025-55398
CVE-2025-55398 affects the mouse07410 asn1c fork (through 0.9.29). In UPER decoding, asn1c-generated decoders fail to enforce INTEGER constraints when the bound is positive and exceeds 32 bits, potentially processing malformed input. Affected: decoders in this asn1c fork; impact is high (per CVSS...
VerilogLAVD: LLM-Aided Rule Generation for Vulnerability Detection in Verilog
Timely detection of hardware vulnerabilities during the early design stage is critical for reducing remediation costs. Existing early detection techniques often require specialized security expertise, limiting their usability. Recent efforts have explored the use of large language models LLMs for...
Malicious code in star-abstract-epsilon-log-pipe (npm)
The package star-abstract-epsilon-log-pipe was found to contain malicious code...
Malicious code in final-abstract-info-benchmark-gamma (npm)
The package final-abstract-info-benchmark-gamma was found to contain malicious code...
Malicious code in abstract-permission-root-kappa-deploy (npm)
The package abstract-permission-root-kappa-deploy was found to contain malicious code...
MAL-2025-13962 Malicious code in abstract-permission-root-kappa-deploy (npm)
The package abstract-permission-root-kappa-deploy was found to contain malicious code...
MAL-2025-24404 Malicious code in kernel-abstract-compile-proxy-orchestrate (npm)
The package kernel-abstract-compile-proxy-orchestrate was found to contain malicious code...
Malicious code in kernel-abstract-compile-proxy-orchestrate (npm)
The package kernel-abstract-compile-proxy-orchestrate was found to contain malicious code...
MAL-2025-38554 Malicious code in void-psi-omicron-signal-abstract (npm)
The package void-psi-omicron-signal-abstract was found to contain malicious code...
MAL-2025-20564 Malicious code in final-abstract-info-benchmark-gamma (npm)
The package final-abstract-info-benchmark-gamma was found to contain malicious code...
MAL-2025-33918 Malicious code in star-abstract-epsilon-log-pipe (npm)
The package star-abstract-epsilon-log-pipe was found to contain malicious code...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to improper processing of large name constraint structures in PKIXCertPathReviewer. An attacker can cause excessive resource allocation by submitting specially crafted ASN.1...
Allocation of Resources Without Limits or Throttling
Overview org.bouncycastle:bcprov-ext-jdk15to18 is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to improper processing of large name constraint structures in PKIXCertPathReviewer. An...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the ASN1ObjectIdentifier. An attacker can cause excessive resource consumption by submitting specially crafted ASN.1 Object Identifiers, potentially leading to service disruption...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the ASN1ObjectIdentifier. An attacker can cause excessive resource consumption by submitting specially crafted ASN.1 Object Identifiers, potentially leading to service disruption...
BIT-LIBPYTHON-2022-42919
Python 3.9.x before 3.9.16 and 3.10.x before 3.10.9 on Linux allows local privilege escalation in a non-default configuration. The Python multiprocessing library, when used with the forkserver start method on Linux, allows pickles to be deserialized from any user in the same machine local network...
Breaking Obfuscation: Cluster-Aware Graph with LLM-Aided Recovery for Malicious JavaScript Detection
With the rapid expansion of web-based applications and cloud services, malicious JavaScript code continues to pose significant threats to user privacy, system integrity, and enterprise security. But, detecting such threats remains challenging due to sophisticated code obfuscation techniques and...
Malicious code in bingo-abstract-transport (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c453cfd4d38bc70b9b47a64bb81b2c3c982b8811f3fefe95b1788b5a24340808 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
AgentAlign: Navigating Safety Alignment in the Shift from Informative to Agentic Large Language Models
The acquisition of agentic capabilities has transformed LLMs from "knowledge providers" to "action executors", a trend that while expanding LLMs' capability boundaries, significantly increases their susceptibility to malicious use. Previous work has shown that current LLM-based agents execute...