435 matches found
EUVD-2019-6018
Malware in sbrugna...
EUVD-2019-6020
Malware in sbrugna...
EUVD-2024-34039
Malicious code in bioql PyPI...
EUVD-2024-34037
Malicious code in bioql PyPI...
EUVD-2024-34038
Malicious code in bioql PyPI...
EUVD-2024-34040
Malicious code in bioql PyPI...
EUVD-2024-0987
Malicious code in bioql PyPI...
EUVD-2025-2018
Malicious code in bioql PyPI...
EUVD-2022-33094
Malicious code in bioql PyPI...
Scattered LAPSUS$ Hunters Claim Salesforce Breach, 1B Records, 39 Firms Listed
A leak site from Scattered LAPSUS$ Hunters alleges Salesforce breach, with hackers claiming 1B records stolen and 39 major companies affected...
Airline data broker selling 5 billion passenger records to US government
We already knew that the US airline industry gave the government access to passenger records. However, this week it emerged that at least five billion passenger records are being sold to government agencies via a searchable database—far more than was initially believed. A few weeks ago,...
Linux Distros Unpatched Vulnerability : CVE-2022-28652
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - /.config/apport/settings parsing is vulnerable to billion laughs attack CVE-2022-28652 - /.config/apport/settings parsing is vulnerable to billion laughs attack...
Linux Distros Unpatched Vulnerability : CVE-2019-5427
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - c3p0 version 0.9.5.4 may be exploited by a billion laughs attack when loading XML configuration due to missing protections against recursive entity expansion wh...
Scaling Decentralized Learning with FLock
Fine-tuning the large language models LLMs are prevented by the deficiency of centralized control and the massive computing and communication overhead on the decentralized schemes. While the typical standard federated learning FL supports data privacy, the central server requirement creates a...
CVE-2025-3225
An XML Entity Expansion vulnerability, also known as a 'billion laughs' attack, exists in the sitemap parser of the run-llama/llamaindex repository, specifically affecting version v0.12.21. This vulnerability allows an attacker to supply a malicious Sitemap XML, leading to a Denial of Service DoS...
CLSA-2025-1751620336 libarchive: Fix of CVE-2025-5914
CVE-2025-5914: fix double free with over 4 billion nodes...
CLSA-2025-1751143694 libarchive: Fix of CVE-2025-5914
CVE-2025-5914: fix double free with over 4 billion nodes...
CVE-2024-1455
A vulnerability in the langchain-ai/langchain repository allows for a Billion Laughs Attack, a type of XML External Entity XXE exploitation. By nesting multiple layers of entities within an XML document, an attacker can cause the XML parser to consume excessive CPU and memory resources, leading t...
CVE-2023-47163
Remarshal prior to v0.17.1 expands YAML alias nodes unlimitedly, hence Remarshal is vulnerable to Billion Laughs Attack. Processing untrusted YAML files may cause a denial-of-service DoS condition...