Malicious code in form-classifier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aee6a6945bad04a1ec3fbe89e2cbe5013625ba025601a3df6678a125761d3b55 The package form-classifier was found to contain malicious code...

EUVD-2025-175355

Malicious code in form-classifier npm...

BLADE: Behavior-Level Anomaly Detection Using Network Traffic in Web Services

With their widespread popularity, web services have become the main targets of various cyberattacks. Existing traffic anomaly detection approaches focus on flow-level attacks, yet fail to recognize behavior-level attacks, which appear benign in individual flows but reveal malicious purpose using...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: elvish, velero-plugin-for-microsoft-azure, kubernetes-replicator, bom, cluster-api-gcp-controller, manifest-tool, flyte, helm-mapkubeapis, kube-vip-cloud-provider, k3d, terraform-provider-tls, docker-machine-driver-harvester, ko, stern, terraform-provider-random,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: elvish, manifest-tool, traefik, pulumi-language-java, k3d, terraform-provider-tls, trillian, gostatsd, dask-gateway, trivy-operator, fulcio, cloud-sql-proxy, falco-exporter, velero, kubernetes-event-exporter, kapp, kubernetes-csi-external-attacher, neuvector-dbgen,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: prometheus-blackbox-exporter, kaf, gosu-fips, sbom-convert, argo-cd, petname, gops-fips, pushprox, openbao-k8s-fips, kubevela, monstache, newrelic-nri-statsd, blob-csi, metrics-server, dataplaneapi-fips, http-echo, step-kms-plugin, dapr, oauth2-proxy-fips, harbor,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: prometheus-blackbox-exporter, kaf, gosu-fips, sbom-convert, argo-cd, petname, gops-fips, pushprox, openbao-k8s-fips, kubevela, monstache, newrelic-nri-statsd, blob-csi, metrics-server, dataplaneapi-fips, http-echo, step-kms-plugin, dapr, oauth2-proxy-fips, harbor,...

pytorch-vision-classifier (>=0.0.4, <=0.0.8), train-and-deploy (>=0.1.1a0, <=0.1.4) +2 more potentially affected by CVE-2025-11200 via mlflow (1.10.0)

mlflow PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - pytorch-vision-classifier =0.0.4, =0.1.1a0, =0.4.1, =0.4.2 - waveletai 0.2.4 Source cves: CVE-2025-11200 Source advisory: OSV:GHSA-6XJ8-RRQX-R4CV...

pytorch-vision-classifier (>=0.0.4, <=0.0.8), train-and-deploy (>=0.1.1a0, <=0.1.4) +2 more potentially affected by CVE-2025-11201 via mlflow (1.10.0)

mlflow PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - pytorch-vision-classifier =0.0.4, =0.1.1a0, =0.4.1, =0.4.2 - waveletai 0.2.4 Source cves: CVE-2025-11201 Source advisory: OSV:GHSA-5CVJ-7RG6-JGGJ...

Siemens SIMATIC Devices Out-of-bounds Read (CVE-2023-42755)

A flaw was found in the IPv4 Resource Reservation Protocol RSVP classifier in the Linux kernel. The xprt pointer may go beyond the linear part of the skb, leading to an out-of-bounds read in the rsvpclassify function. This issue may allow a local user to crash the system and cause a denial of...

CVE-2023-53733

In the Linux kernel, the following vulnerability has been resolved: net: sched: clsu32: Undo tcfbindfilter if u32replacehwknode When u32replacehwknode fails, we need to undo the tcfbindfilter operation done at u32setparms...

Attack-Specialized Deep Learning with Ensemble Fusion for Network Anomaly Detection

The growing scale and sophistication of cyberattacks pose critical challenges to network security, particularly in detecting diverse intrusion types within imbalanced datasets. Traditional intrusion detection systems IDS often struggle to maintain high accuracy across both frequent and rare...

A Multi-Layered Embedded Intrusion Detection Framework for Programmable Logic Controllers

Industrial control system ICS operations use trusted endpoints like human machine interfaces HMIs and workstations to relay commands to programmable logic controllers PLCs. Because most PLCs lack layered defenses, compromise of a trusted endpoint can drive unsafe actuator commands and risk...

ensemble_classifer() function in the Code Execution

The vulnerability of the ensembleclassifer function in the library for training large language models with NVIDIA Megatron-LM exists due to improper code generation control. Exploiting this vulnerability allows attackers to execute arbitrary code, gain elevated privileges, and expose sensitive...

EUVD-2019-16187

Malware in sbrugna...

EUVD-2013-0213

Malware in sbrugna...

EUVD-2023-39785

Malicious code in bioql PyPI...

EUVD-2025-15944

Malicious code in bioql PyPI...

EUVD-2025-30973

Malicious code in bioql PyPI...

NVIDIA Megatron-LM ensemble_classifer script code injection vulnerability

NVIDIA Megatron-LM is a PyTorch-based distributed training framework from NVIDIA that specializes in training large Transformer language models. A code injection vulnerability exists in the NVIDIA Megatron-LM ensembleclassifer script, which can be exploited by attackers to cause code execution,...