4825 matches found
Decoding Deception: Understanding Automatic Speech Recognition Vulnerabilities in Evasion and Poisoning Attacks
Recent studies have demonstrated the vulnerability of Automatic Speech Recognition systems to adversarial examples, which can deceive these systems into misinterpreting input speech commands. While previous research has primarily focused on white-box attacks with constrained optimizations, and...
Flock Safety The Bravo Compute Box 安全漏洞
Flock Safety The Bravo Compute Box is an edge computing device from Flock Safety USA. A security vulnerability exists in Flock Safety The Bravo Compute Box BRAVO00.00local20241017 version, which stems from an unlocked bootloader, and could result in bypassing the Android Verified Boot and modifyi...
Flock Safety The Bravo Compute Box 安全漏洞
Flock Safety The Bravo Compute Box is an edge computing device from Flock Safety USA. A security vulnerability exists in Flock Safety The Bravo Compute Box BRAVO00.00local20241017 version, which stems from a disabled secure boot, which could lead to an attacker flashing specially crafted firmware...
Flock Safety The Bravo Compute Box 安全漏洞
Flock Safety The Bravo Compute Box is an edge computing device from Flock Safety USA. A security vulnerability exists in Flock Safety The Bravo Compute Box BRAVO00.00local20241017 version, which stems from the acceptance of the default Thundercomm TurboX 6490 Firehose loader, which could lead to ...
The vulnerability of the SALT.BOX software lies in the lack of protective measures for the SQL query structure, allowing attackers to gain unauthorized access to the protected information.
The vulnerability of the SALT.BOX software lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
The vulnerability of the SALT.BOX software lies in the incorrect handling of symbolic links before accessing files. This allows attackers to influence the integrity, accessibility, and confidentiality of the protected information.
The vulnerability of the SALT.BOX software complex is related to the incorrect definition of symbolic links before accessing the file. Exploiting this vulnerability allows a malicious actor to influence the integrity, accessibility, and confidentiality of the protected information...
The vulnerability of the SALT.BOX software lies in the insufficient checking of requests on the server side, which allows a hacker to execute an SSRF attack.
The vulnerability of the SALT.BOX software lies in insufficient testing of requests on the server side. Exploiting this vulnerability allows a remote attacker to execute an SSRF attack...
Spectral Masking and Interpolation Attack (SMIA): a Black-Box Adversarial Attack against Voice Authentication and Anti-Spoofing Systems
Voice Authentication Systems VAS use unique vocal characteristics for verification. They are increasingly integrated into high-security sectors such as banking and healthcare. Despite their improvements using deep learning, they face severe vulnerabilities from sophisticated threats like deepfake...
CVE-2025-6067: Improper Neutralization of Input During Web Page Generation
The Easy Social Feed – Social Photos Gallery – Post Feed – Like Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the data-caption and data-linktext parameters in all versions up to, and including, 6.6.7 due to insufficient input sanitization and output escaping. This make...
CVE-2025-52548 Enabling SSH and Shellinabox on the vulnerable machine
E3 Site Supervisor Control firmware version 2.31F01 contains a hidden API call in the application services that enables SSH and Shellinabox, which exist but are disabled by default. An attacker with admin access to the application services can utilize this API to enable remote access to the...
Linux Distros Unpatched Vulnerability : CVE-2019-20167
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function sencParse in...
Linux Distros Unpatched Vulnerability : CVE-2020-23931
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in gpac before 1.0.1. The abstboxread function in boxcodeadobe.c has a heap- based buffer over-read. CVE-2020-23931 Note that Nessus...
Linux Distros Unpatched Vulnerability : CVE-2019-20168
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function gfisomboxdumpex in isomedia/boxfuncs.c...
Linux Distros Unpatched Vulnerability : CVE-2018-21017
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GPAC 0.7.1 has a memory leak in dinfRead in isomedia/boxcodebase.c. CVE-2018-21017 Note that Nessus relies on the presence of the package as reported by the...
Malicious code in item-box (npm)
The package item-box was found to contain malicious code...
MAL-2025-42015 Malicious code in item-box (npm)
The package item-box was found to contain malicious code...
Malicious code in editor-script-box (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d7f28dd5b9539646b395ebc2f66ec29862ccab627cf31e631994ef0ac494ba70 The OpenSSF Package Analysis project identified 'editor-script-box' @ 10.0.1 npm as malicious. It is considered malicious because: - The package...
MAL-2025-41812 Malicious code in editor-script-box (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d7f28dd5b9539646b395ebc2f66ec29862ccab627cf31e631994ef0ac494ba70 The OpenSSF Package Analysis project identified 'editor-script-box' @ 10.0.1 npm as malicious. It is considered malicious because: - The package...
