4007 matches found
Black Duck SCA 安全漏洞
Black Duck SCA is a software composition analysis tool from Black Duck USA. A security vulnerability exists in Black Duck SCA versions prior to 2025.10.0 that stems from an overly broad configuration of user role permissions, which could lead to unauthorized project configuration changes or acces...
PT-2025-47803
Black Duck SCA versions prior to 2025.10.0 had user role permissions configured in an overly broad manner. Users with the scoped Project Manager user role with the Global User Read access permission enabled access to certain Project Administrator functionalities which should have be inaccessible...
"To Survive, I Must Defect": Jailbreaking LLMs Via the Game-Theory Scenarios
As LLMs become more common, non-expert users can pose risks, prompting extensive research into jailbreak attacks. However, most existing black-box jailbreak attacks rely on hand-crafted heuristics or narrow search spaces, which limit scalability. Compared with prior attacks, we propose Game-Theor...
[SECURITY] Fedora 41 Update: ruff-0.14.3-1.fc41
An extremely fast Python linter and code formatter, written in Rust. Ruff aims to be orders of magnitude faster than alternative tools while integrating more functionality behind a single, common interface. Ruff can be used to replace Flake8 plus dozens of plugins, Black, isort, pydocstyle,...
GRAPHTEXTACK: A Realistic Black-Box Node Injection Attack on LLM-Enhanced GNNs
Text-attributed graphs TAGs, which combine structural and textual node information, are ubiquitous across many domains. Recent work integrates Large Language Models LLMs with Graph Neural Networks GNNs to jointly model semantics and structure, resulting in more general and expressive models that...
kernel: mm: fix zswap writeback race condition
In the Linux kernel, the following vulnerability has been resolved: mm: fix zswap writeback race condition The zswap writeback mechanism can cause a race condition resulting in memory corruption, where a swapped out page gets swapped in with data that was written to a different page. The race...
EUVD-2025-117402
Malicious code in exceptional-black-krill npm...
EUVD-2025-117498
Malicious code in central-black-swan npm...
EUVD-2025-117061
Malicious code in sticky-black-possum npm...
EUVD-2025-117000
Malicious code in visiting-black-caterpillar npm...
EUVD-2025-117050
Malicious code in successive-black-crocodile npm...
EUVD-2025-117140
Malicious code in racial-black-buzzard npm...
Malicious code in sticky-black-possum (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffba703d7a05da998beebba7645051ceceea61bf4bf3c101284d3fc248be1762 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-117092
Malicious code in simple-black-peacock npm...
EUVD-2025-117508
Malicious code in bitter-black-koi npm...
Malicious code in inclined-black-shrew (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2705f85a0fcd905ce8ec3ebbe31f26515bd3c273b66f274be5b8879b3bfde44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-138604 Malicious code in central-black-swan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a1bd430632870231228667d0ac88248fd249f6f82033daedb7a8f2f97f0ec02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-117220
Malicious code in mutual-black-roundworm npm...
Malicious code in racial-black-buzzard (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d484b1b3955d344c8437e7d180ac8f1e87c3e20ac5b3b5a2bc7d046da3ded104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...