308 matches found
Google's New AI Doesn't Just Find Vulnerabilities — It Rewrites Code to Patch Them
Google's DeepMind division on Monday announced an artificial intelligence AI-powered agent called CodeMender that automatically detects, patches, and rewrites vulnerable code to prevent future exploits. The efforts add to the company's ongoing efforts to improve AI-powered vulnerability discovery...
EUVD-2017-2031
Malware in sbrugna...
EUVD-2022-24733
Malicious code in bioql PyPI...
EUVD-2023-2390
Malicious code in bioql PyPI...
EUVD-2024-26774
Malicious code in bioql PyPI...
EUVD-2025-16335
Malicious code in bioql PyPI...
EUVD-2025-20176
Malicious code in bioql PyPI...
LLM-Based Vulnerability Discovery through the Lens of Code Metrics
Large language models LLMs excel in many tasks of software engineering, yet progress in leveraging them for vulnerability discovery has stalled in recent years. To understand this phenomenon, we investigate LLMs through the lens of classic code metrics. Surprisingly, we find that a classifier...
NULL Pointer Dereference
Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the prefetchParentTask and recursiveDownloadWithDirectMetadata, which the first return value of the functions is dereferenced even when the functions returns an error. An attacker can cause the application t...
ALPHA: LLM-Enabled Active Learning for Human-Free Network Anomaly Detection
Network log data analysis plays a critical role in detecting security threats and operational anomalies. Traditional log analysis methods for anomaly detection and root cause analysis rely heavily on expert knowledge or fully supervised learning models, both of which require extensive labeled dat...
CVE-2025-54599
The Bevy Event service (versions through 2025-07-22 ), which supports eBay Seller Events and other activities, is vulnerable to account takeover due to an SSO misconfiguration . If Single Sign-On (SSO) is enabled, an attacker can exploit this by creating their own account and performing an SSO lo...
Linux Distros Unpatched Vulnerability : CVE-2021-30952
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2,...
Linux Distros Unpatched Vulnerability : CVE-2023-2593
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw exists within the Linux kernel's handling of new TCP connections. The issue results from the lack of memory release after its effective lifetime. This...
Malicious code in test-mlw2-drats-cause (npm)
The package test-mlw2-drats-cause was found to contain malicious code...
MAL-2025-35226 Malicious code in test-mlw2-drats-cause (npm)
The package test-mlw2-drats-cause was found to contain malicious code...
CVE-2025-53170
Null pointer dereference vulnerability in the application exit cause module Impact: Successful exploitation of this vulnerability may affect function stability...
CVE-2025-53170
Null pointer dereference vulnerability in the application exit cause module Impact: Successful exploitation of this vulnerability may affect function stability...
CVE-2025-53170: NULL Pointer Dereference
Null pointer dereference vulnerability in the application exit cause module Impact: Successful exploitation of this vulnerability may affect function stability...
PT-2025-28103 · Huawei +1 · Harmonyos
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to a null pointer dereference vulnerability in the application exit cause module. Successful exploitation of this vulnerability may affect function stability...
USN-7588-1 gss-ntlmssp vulnerabilities
Phil Turnbull discovered that GSS NTLMSSP may perform out-of-bounds reads when decoding NTLM fields and target information. An attacker could possibly use this issue to cause GSS NTLMSSP to crash, resulting in a denial of service. CVE-2023-25563, CVE-2023-25567 Phil Turnbull discovered that GSS...