519 matches found
VULPO: Context-Aware Vulnerability Detection Via On-Policy LLM Optimization
The widespread reliance on open-source software dramatically increases the risk of vulnerability exploitation, underscoring the need for effective and scalable vulnerability detection VD. Existing VD techniques, whether traditional machine learning-based or LLM-based approaches like prompt...
NegBLEURT Forest: Leveraging Inconsistencies for Detecting Jailbreak Attacks
Jailbreak attacks designed to bypass safety mechanisms pose a serious threat by prompting LLMs to generate harmful or inappropriate content, despite alignment with ethical guidelines. Crafting universal filtering rules remains difficult due to their inherent dependence on specific contexts. To...
AFLGopher: Accelerating Directed Fuzzing Via Feasibility-Aware Guidance
Directed fuzzing is a useful testing technique that aims to efficiently reach target code sites in a program. The core of directed fuzzing is the guiding mechanism that directs the fuzzing to the specified target. A general guiding mechanism adopted in existing directed fuzzers is to calculate th...
CVE-2025-40160 xen/events: Return -EEXIST for bound VIRQs
In the Linux kernel, the following vulnerability has been resolved: xen/events: Return -EEXIST for bound VIRQs Change findvirq to return -EEXIST when a VIRQ is bound to a different CPU than the one passed in. With that, remove the BUGON from bindvirqtoirq to propogate the error upwards. Some VIRQ...
Slice-Aware Spoofing Detection in 5G Networks Using Lightweight Machine Learning
The increasing virtualization of fifth generation 5G networks expands the attack surface of the user plane, making spoofing a persistent threat to slice integrity and service reliability. This study presents a slice-aware lightweight machine-learning framework for detecting spoofing attacks withi...
CVE-2025-63645
CVE-2025-63645 is a stored XSS in pH7Software pH7-Social-Dating-CMS 17.9.1, affecting the messaging system where unsanitized message content is persisted and later rendered in Inbox view without proper encoding, allowing attacker-controlled content to execute in a recipient’s browser. Public docs...
StyleBreak: Revealing Alignment Vulnerabilities in Large Audio-Language Models Via Style-Aware Audio Jailbreak
Large Audio-language Models LAMs have recently enabled powerful speech-based interactions by coupling audio encoders with Large Language Models LLMs. However, the security of LAMs under adversarial attacks remains underexplored, especially through audio jailbreaks that craft malicious audio promp...
EUVD-2025-101318
Malicious code in awarestoatz3n npm...
MAL-2025-112757 Malicious code in aware_clam_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea924f320fc0e14f2b2db0d20de52369ed5d80a3b96c31198aa4ccd444fe046e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CISO's Expert Guide To AI Supply Chain Attacks
AI-enabled supply chain attacks jumped 156% last year. Discover why traditional defenses are failing and what CISOs must do now to protect their organizations. Download the full CISO’s expert guide to AI Supply chain attacks here. TL;DR AI-enabled supply chain attacks are exploding in scale and...
Malicious code in aware_butterfly_orange-61 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7d7c2a8d987e7065540c2e808630b3a40d1e0d672dec8f2e7c1710c8b29c6af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-74869
Malicious code in awarebutterflyorange-61 npm...
EUVD-2025-74974
Malicious code in awaremink-tool npm...
EUVD-2025-74973
Malicious code in awareminnow-gooddev npm...
Malicious code in aware_minnow-gooddev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b260c1fda3ebe266fc08db7bd5c5e6ed22fd61fb4c9d09109e23017dba8a70ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in aware_mink-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a0d5b798e5d3d2fabec7584edc19a56b595130041400392c9e74516237917c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-74972
Malicious code in awarequokka-silentdev npm...
MAL-2025-99704 Malicious code in aware_minnow-gooddev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b260c1fda3ebe266fc08db7bd5c5e6ed22fd61fb4c9d09109e23017dba8a70ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-99703 Malicious code in aware_mink-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a0d5b798e5d3d2fabec7584edc19a56b595130041400392c9e74516237917c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...