169 matches found
EUVD-2025-150152
Malicious code in tadasdhi-ert-bert npm...
Malicious code in tadasdhi-ert-bert (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66cd0e05d37ed003692499adb437dbba39fcbc958137c68ce8f387f4da314af6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-93536
NVIDIA NeMo Framework for all platforms contains a vulnerability in the bert services component where malicious data created by an attacker may cause a code injection. A successful exploit of this vulnerability may lead to Code execution, Escalation of privileges, Information disclosure, and Data...
CVE-2025-33178
NVIDIA NeMo Framework for all platforms contains a vulnerability in the bert services component where malicious data created by an attacker may cause a code injection. A successful exploit of this vulnerability may lead to Code execution, Escalation of privileges, Information disclosure, and Data...
CVE-2025-33178
NVIDIA NeMo Framework for all platforms contains a vulnerability in the bert services component where malicious data created by an attacker may cause a code injection. A successful exploit of this vulnerability may lead to Code execution, Escalation of privileges, Information disclosure, and Data...
CVE-2025-33178
CVE-2025-33178 affects NVIDIA NeMo Framework ( Bert services component). The vulnerability arises from processing of malicious data, enabling code injection which may lead to Code execution, Privilege Escalation, Information disclosure, and Data tampering. NVIDIA’s advisories indicate remediation...
CVE-2025-33178
NVIDIA NeMo Framework for all platforms contains a vulnerability in the bert services component where malicious data created by an attacker may cause a code injection. A successful exploit of this vulnerability may lead to Code execution, Escalation of privileges, Information disclosure, and Data...
CVE-2025-33178
NVIDIA NeMo Framework for all platforms contains a vulnerability in the bert services component where malicious data created by an attacker may cause a code injection. A successful exploit of this vulnerability may lead to Code execution, Escalation of privileges, Information disclosure, and Data...
Malicious code in bert-wallet-store (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc295c0ca6ac9bcceb7ff77c16a3e1fb99b690b33a055f88b6e7ed2b95fc8eb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-79724
Malicious code in bert-soluble-pot npm...
MAL-2025-99947 Malicious code in bert-wallet-store (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc295c0ca6ac9bcceb7ff77c16a3e1fb99b690b33a055f88b6e7ed2b95fc8eb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-79723
Malicious code in bert-wallet-store npm...
Malicious code in bert-soluble-pot (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26d09fb3c2c75ebc8ce22de171e2bff29f5e48d9c072b9a5fa187bc3d57294d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-99946 Malicious code in bert-soluble-pot (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26d09fb3c2c75ebc8ce22de171e2bff29f5e48d9c072b9a5fa187bc3d57294d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
NVIDIA Nemo Framework 代码注入漏洞
NVIDIA Nemo Framework is a framework for building and deploying generative AI models from NVIDIA. A code injection vulnerability exists in NVIDIA Nemo Framework, which stems from the bert services component that may process malicious data, which could lead to code injection, elevation of privileg...
PT-2025-46374
Name of the Vulnerable Software and Affected Versions NVIDIA NeMo Framework affected versions not specified Description The NVIDIA NeMo Framework contains a flaw within the bert services component. An attacker could craft malicious data that leads to code injection. Exploitation of this issue may...
Detecting Vulnerabilities from Issue Reports for Internet-Of-Things
Timely identification of issue reports reflecting software vulnerabilities is crucial, particularly for Internet-of-Things IoT where analysis is slower than non-IoT systems. While Machine Learning ML and Large Language Models LLMs detect vulnerability-indicating issues in non-IoT systems, their I...
A Hard-Label Black-Box Evasion Attack against ML-Based Malicious Traffic Detection Systems
Machine Learning ML-based malicious traffic detection is a promising security paradigm. It outperforms rule-based traditional detection by identifying various advanced attacks. However, the robustness of these ML models is largely unexplored, thereby allowing attackers to craft adversarial traffi...