Foe for Fraud: Transferable Adversarial Attacks in Credit Card Fraud Detection

Credit card fraud detection CCFD is a critical application of Machine Learning ML in the financial sector, where accurately identifying fraudulent transactions is essential for mitigating financial losses. ML models have demonstrated their effectiveness in fraud detection task, in particular with...

WordPress plugin Comments Capcha Box 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

CVE-2025-53226: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in digitalzoomstudio Comments Capcha Box comments-capcha-box allows Reflected XSS.This issue affects Comments Capcha Box: from n/a through = 1.1...

The vulnerability of the TrackWriter handler in the MP4Box utility of the GPAC multimedia platform allows a perpetrator to cause a service failure.

The vulnerability of the TrackWriter processor in the MP4Box multimedia platform of GPAC involves the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

WordPress Comments Capcha Box Plugin <= 1.1 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Skalucy in WordPress Plugin Comments Capcha Box versions = 1.1...

Enhancing Targeted Adversarial Attacks on Large Vision-Language Models through Intermediate Projector Guidance

Targeted adversarial attacks are essential for proactively identifying security flaws in Vision-Language Models before real-world deployment. However, current methods perturb images to maximize global similarity with the target text or reference image at the encoder level, collapsing rich visual...

MAJIC: Markovian Adaptive Jailbreaking Via Iterative Composition of Diverse Innovative Strategies

Large Language Models LLMs have exhibited remarkable capabilities but remain vulnerable to jailbreaking attacks, which can elicit harmful content from the models by manipulating the input prompts. Existing black-box jailbreaking techniques primarily rely on static prompts crafted with a single,...

Linux Distros Unpatched Vulnerability : CVE-2021-31254

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in the tencboxread function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file,...

Linux Distros Unpatched Vulnerability : CVE-2021-21859

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. The...

Linux Distros Unpatched Vulnerability : CVE-2021-46041

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Segmentation Fault Vulnerability exists in GPAC 1.0.1 via the co64boxnew function, which causes a Denial of Service. CVE-2021-46041 Note that Nessus relies on...

Malicious code in @hornetsecurity/angular-search-box (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-6903 Malicious code in @hornetsecurity/angular-search-box (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in center-box (npm)

The package center-box was found to contain malicious code...

Malicious code in metacoin-box (npm)

The package metacoin-box was found to contain malicious code...

Malicious code in node-box-config (npm)

The package node-box-config was found to contain malicious code...

MAL-2025-27607 Malicious code in node-box-config (npm)

The package node-box-config was found to contain malicious code...

MAL-2025-16721 Malicious code in center-box (npm)

The package center-box was found to contain malicious code...

MAL-2025-26227 Malicious code in metacoin-box (npm)

The package metacoin-box was found to contain malicious code...

CVE-2025-49056

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in shen2 多说社会化评论框 duoshuo allows Reflected XSS.This issue affects 多说社会化评论框: from n/a through = 1.2...

CVE-2025-49056

CVE-2025-49056 affects the WordPress plugin 多说社会化评论框 (versions n/a through 1.2). The vulnerability is a Reflected Cross-Site Scripting (XSS) caused by improper neutralization of input during web page generation. The CVSS v3.1 vector is AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L with a base score of 7.1 ...