AFLGopher: Accelerating Directed Fuzzing Via Feasibility-Aware Guidance

Directed fuzzing is a useful testing technique that aims to efficiently reach target code sites in a program. The core of directed fuzzing is the guiding mechanism that directs the fuzzing to the specified target. A general guiding mechanism adopted in existing directed fuzzers is to calculate th...

CVE-2025-40160 xen/events: Return -EEXIST for bound VIRQs

In the Linux kernel, the following vulnerability has been resolved: xen/events: Return -EEXIST for bound VIRQs Change findvirq to return -EEXIST when a VIRQ is bound to a different CPU than the one passed in. With that, remove the BUGON from bindvirqtoirq to propogate the error upwards. Some VIRQ...

CVE-2025-63645

A stored cross-site scripting (XSS) vulnerability exists in pH7Software pH7-Social-Dating-CMS version 17.9.1 within its message system. The root cause is the application's failure to properly sanitize or apply context-aware encoding to the message content field. Consequently, unsanitized content ...

StyleBreak: Revealing Alignment Vulnerabilities in Large Audio-Language Models Via Style-Aware Audio Jailbreak

Large Audio-language Models LAMs have recently enabled powerful speech-based interactions by coupling audio encoders with Large Language Models LLMs. However, the security of LAMs under adversarial attacks remains underexplored, especially through audio jailbreaks that craft malicious audio promp...

Slice-Aware Spoofing Detection in 5G Networks Using Lightweight Machine Learning

The increasing virtualization of fifth generation 5G networks expands the attack surface of the user plane, making spoofing a persistent threat to slice integrity and service reliability. This study presents a slice-aware lightweight machine-learning framework for detecting spoofing attacks withi...

EUVD-2025-101318

Malicious code in awarestoatz3n npm...

MAL-2025-112757 Malicious code in aware_clam_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea924f320fc0e14f2b2db0d20de52369ed5d80a3b96c31198aa4ccd444fe046e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CISO's Expert Guide To AI Supply Chain Attacks

AI-enabled supply chain attacks jumped 156% last year. Discover why traditional defenses are failing and what CISOs must do now to protect their organizations. Download the full CISO’s expert guide to AI Supply chain attacks here. TL;DR AI-enabled supply chain attacks are exploding in scale and...

EUVD-2025-74869

Malicious code in awarebutterflyorange-61 npm...

Malicious code in aware_butterfly_orange-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7d7c2a8d987e7065540c2e808630b3a40d1e0d672dec8f2e7c1710c8b29c6af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74974

Malicious code in awaremink-tool npm...

EUVD-2025-74972

Malicious code in awarequokka-silentdev npm...

MAL-2025-99704 Malicious code in aware_minnow-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b260c1fda3ebe266fc08db7bd5c5e6ed22fd61fb4c9d09109e23017dba8a70ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99703 Malicious code in aware_mink-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a0d5b798e5d3d2fabec7584edc19a56b595130041400392c9e74516237917c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aware_mink-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a0d5b798e5d3d2fabec7584edc19a56b595130041400392c9e74516237917c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aware_minnow-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b260c1fda3ebe266fc08db7bd5c5e6ed22fd61fb4c9d09109e23017dba8a70ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74973

Malicious code in awareminnow-gooddev npm...

EUVD-2025-77714

Malicious code in awarecatfishz3n npm...

EUVD-2025-77712

Malicious code in awareimpalaz3n npm...

Malicious code in aware_impala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6602ba82a7d9a62db04b344b5e861dc4d18ecd08e81efe8c2bfafc36c5e37d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...