38845 matches found
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: pam (UTSA-2025-986122)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986122 advisory. A flaw was found in linux-pam. The module pamnamespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileg...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: pam (UTSA-2025-986091)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986091 advisory. A flaw was found in linux-pam. The module pamnamespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileg...
How we trained an ML model to detect DLL hijacking
DLL hijacking is a common technique in which attackers replace a library called by a legitimate process with a malicious one. It is used by both creators of mass-impact malware, like stealers and banking Trojans, and by APT and cybercrime groups behind targeted attacks. In recent years, the numbe...
CVE-2025-59449
The YoSmart YoLink MQTT broker through 2025-10-02 does not enforce sufficient authorization controls to prevent cross-account attacks, allowing an attacker to remotely operate affected devices if the attacker obtains the associated device IDs. Because YoLink device IDs are predictable, an attacke...
PyVista 代码注入漏洞
PyVista is an open source Python library for 3D drawing and mesh analysis from PyVista. A code injection vulnerability exists in PyVista version 0.46.3 that stems from dependency obfuscation and could lead to remote code execution and supply chain attacks...
AutoDAN-Reasoning: Enhancing Strategies Exploration Based Jailbreak Attacks with Test-Time Scaling
Recent advancements in jailbreaking large language models LLMs, such as AutoDAN-Turbo, have demonstrated the power of automated strategy discovery. AutoDAN-Turbo employs a lifelong learning agent to build a rich library of attack strategies from scratch. While highly effective, its test-time...
CVE-2025-59449
The YoSmart YoLink MQTT broker and ecosystem components through 2025-10-02 contain multiple concrete issues: (1) insufficient authorization controls allow cross-account attack if an attacker learns device IDs, potentially enabling remote control of other users’ devices; (2) YoLink device IDs are ...
YoSmart YoLink MQTT broker 安全漏洞
YoSmart YoLink MQTT broker is a messaging proxy server from YoSmart USA. A security vulnerability exists in YoSmart YoLink MQTT broker version 2025-10-02 and earlier, which stems from insufficient authorization controls and could lead to cross-account attacks...
EUVD-2022-2042
Malicious code in bioql PyPI...
EUVD-2022-42269
Malicious code in bioql PyPI...
EUVD-2022-44248
Malicious code in bioql PyPI...
EUVD-2024-42515
Malicious code in bioql PyPI...
EUVD-2025-6425
Malicious code in bioql PyPI...
EUVD-2022-25976
Malicious code in bioql PyPI...
EUVD-2025-21941
Malicious code in bioql PyPI...
EUVD-2021-8094
Malicious code in bioql PyPI...
EUVD-2025-20229
Malicious code in bioql PyPI...
EUVD-2022-6288
Malicious code in bioql PyPI...