Beyond Personalization: Federated Recommendation with Calibration Via Low-Rank Decomposition

Federated recommendation FR is a promising paradigm to protect user privacy in recommender systems. Distinct from general federated scenarios, FR inherently needs to preserve client-specific parameters, i.e., user embeddings, for privacy and personalization. However, we empirically find that...

Mapping NVD Records to Their VFCs: How Hard Is It?

Mapping National Vulnerability Database NVD records to vulnerability-fixing commits VFCs is crucial for vulnerability analysis but challenging due to sparse explicit links in NVD references.This study explores this mapping's feasibility through an empirical approach. Manual analysis of NVD...

Covert Entanglement Generation over Bosonic Channels

Whitepaper called Covert Entanglement Generation Over Bosonic Channels...

OS Command Exec, Unix Command Shell, Bind TCP (via Perl)

Execute an OS command from PHP. Listen for a connection and spawn a command shell via perl Module Options msf use payload/php/unix/cmd/bindperl msf payloadbindperl show actions ...actions... msf payloadbindperl set ACTION msf payloadbindperl show options ...show and set options... msf...

OS Command Exec, Unix Command Shell, Reverse TCP (/dev/tcp)

Execute an OS command from PHP. Creates an interactive shell via bash's builtin /dev/tcp. This will not work on circa 2009 and older Debian-based Linux distributions including Ubuntu because they compile bash without the /dev/tcp feature. Module Options msf use payload/php/unix/cmd/reversebash ms...

Stark-Coleman Invariants and Quantum Lower Bounds: an Integrated Framework for Real Quadratic Fields

Class groups of real quadratic fields represent fundamental structures in algebraic number theory with significant computational implications. While Stark's conjecture establishes theoretical connections between special units and class group structures, explicit constructions have remained elusiv...

Food-Ordering-System-in-PHP-CodeIgniter-

It is an offensive tool for web application exploitation. This r...

Mind the Web: the Security of Web Use Agents

Web-use agents are rapidly being deployed to automate complex web tasks, operating with extensive browser capabilities including multi-tab navigation, DOM manipulation, JavaScript execution and authenticated session access. However, these powerful capabilities create a critical and previously...

Code-project Staff Audit System Project /update_index.php SQL injection

Code-project Staff Audit System Project /updateindex.php SQL...

A Systematic Review of Poisoning Attacks against Large Language Models

With the widespread availability of pretrained Large Language Models LLMs and their training datasets, concerns about the security risks associated with their usage has increased significantly. One of these security risks is the threat of LLM poisoning attacks where an attacker modifies some part...

tc Tor Chat Client 1.2

tc is a low-tech free solution to make yourself anonymously reachable for chat by anyone who only know your onion address and your public key. Messages are PGP encrypted end-to-end and forwarded by Tor's relays. Please note this tarball's hash will not match the main release hash on the tor site ...

Measuring Likelihood in Cybersecurity

In cybersecurity risk is commonly measured by impact and probability, the former is objectively measured based on the consequences from the use of technology to obtain business gains, or by achieving business objectives. The latter has been measured, in sectors such as financial or insurance, bas...

CyberGym: Evaluating AI Agents' Cybersecurity Capabilities with Real-World Vulnerabilities at Scale

Large language model LLM agents are becoming increasingly skilled at handling cybersecurity tasks autonomously. Thoroughly assessing their cybersecurity capabilities is critical and urgent, given the high stakes in this domain. However, existing benchmarks fall short, often failing to capture...

📄 Motivian Content Management System 41.0.0 Arbitrary File Upload

Motivian Content Management System version 41.0.0 suffers from an arbitrary file upload vulnerability. CVE-2025-29093-Arbitrary-File-Upload This repository reveals a security vulnerability discovered in Motivian Content Management System v.41.0.0. - CVE-2025-29093: Arbitrary File Upload This...

SoK: Concurrency in Blockchain -- a Systematic Literature Review and the Unveiling of a Misconception

Smart contracts, the cornerstone of blockchain technology, enable secure, automated distributed execution. Given their role in handling large transaction volumes across clients, miners, and validators, exploring concurrency is critical. This includes concurrent transaction execution or validation...

MINI-7CJC-8HRR-MP2Q

Bulletin has no description...

Demonstration of Quantum-Secure Communications in a Nuclear Reactor

Quantum key distribution QKD, one of the latest cryptographic techniques, founded on the laws of quantum mechanics rather than mathematical complexity, promises for the first time unconditional secure remote communications. Integrating this technology into the next generation nuclear systems -...

MCP Safety Training: Learning to Refuse Falsely Benign MCP Exploits Using Improved Preference Alignment

The model context protocol MCP has been widely adapted as an open standard enabling the seamless integration of generative AI agents. However, recent work has shown the MCP is susceptible to retrieval-based "falsely benign" attacks FBAs, allowing malicious system access and credential theft, but...

Quasi-Periodic Optical Key-Enabled Hybrid Cryptography: Merging Diffractive Physics and Deep Learning for High-Dimensional Security

Optical encryption inherently provides strong security advantages, with hybrid optoelectronic systems offering additional degrees of freedom by integrating optical and algorithmic domains. However, existing optical encryption schemes heavily rely on electronic computation, limiting overall...

Respond to Change with Constancy: Instruction-Tuning with LLM for Non-I.I.D. Network Traffic Classification

Encrypted traffic classification is highly challenging in network security due to the need for extracting robust features from content-agnostic traffic data. Existing approaches face critical issues: i Distribution drift, caused by reliance on the closedworld assumption, limits adaptability to...