3805 matches found
Multimodal Safety Is Asymmetric: Cross-Modal Exploits Unlock Black-Box MLLMs Jailbreaks
Multimodal large language models MLLMs have demonstrated significant utility across diverse real-world applications. But MLLMs remain vulnerable to jailbreaks, where adversarial inputs can collapse their safety constraints and trigger unethical responses. In this work, we investigate jailbreaks i...
CVE-2025-56320
CobbleStone Enterprise Contract Management Portal v.22.4.0 is vulnerable to Stored Cross-Site Scripting XSS in its chat box component. This allows a remote attacker to execute arbitrary code. NOTE: the Supplier reports that this is "Present only in an obsolete, unsupported version no longer in...
CVE-2025-56320
Enterprise Contract Management Portal v.22.4.0 is vulnerable to Stored Cross-Site Scripting XSS in its chat box component. This allows a remote attacker to execute arbitrary code. NOTE: the Supplier reports that this is "Present only in an obsolete, unsupported version no longer in circulation."...
CVE-2025-56320
CobbleStone Enterprise Contract Management Portal v.22.4.0 is vulnerable to Stored Cross-Site Scripting XSS in its chat box component. This allows a remote attacker to execute arbitrary code. NOTE: the Supplier reports that this is "Present only in an obsolete, unsupported version no longer in...
Cobblestone Enterprise Contract Management Software 安全漏洞
Cobblestone Enterprise Contract Management Software is an enterprise contract management software from Cobblestone Corporation, USA. A security vulnerability exists in Cobblestone Enterprise Contract Management Software version 22.4.0, which originates from the presence of stored cross-site...
CVE-2025-56320
The CVE-2025-56320 entry affects Cobblestone’s Enterprise Contract Management Portal v.22.4.0. It describes a Stored Cross-Site Scripting (XSS) vulnerability in the chat box component, enabling a remote attacker to execute arbitrary code. The available data does not provide technical details such...
CVE-2025-56320
CobbleStone Enterprise Contract Management Portal v.22.4.0 is vulnerable to Stored Cross-Site Scripting XSS in its chat box component. This allows a remote attacker to execute arbitrary code. NOTE: the Supplier reports that this is "Present only in an obsolete, unsupported version no longer in...
Malicious Package
Overview item-box is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
A Hard-Label Black-Box Evasion Attack against ML-Based Malicious Traffic Detection Systems
Machine Learning ML-based malicious traffic detection is a promising security paradigm. It outperforms rule-based traditional detection by identifying various advanced attacks. However, the robustness of these ML models is largely unexplored, thereby allowing attackers to craft adversarial traffi...
Cross-site Scripting (XSS)
Overview qwc2-lts is a QGIS Web Client Affected versions of this package are vulnerable to Cross-site Scripting XSS via multiple components, including ServiceInfoWindow, SearchBox, LayerInfoWindow, and others. An attacker can execute arbitrary JavaScript code in the context of the user's browser ...
EUVD-2005-2272
Malware in sbrugna...
EUVD-2010-4340
Malware in sbrugna...
EUVD-2018-20622
Malware in sbrugna...
EUVD-2004-0920
Malware in sbrugna...
EUVD-2012-1425
Malware in sbrugna...
EUVD-2006-2966
Malware in sbrugna...
EUVD-2011-2920
Malware in sbrugna...
EUVD-2019-5925
Malware in sbrugna...