Addressing Side-Channel Threats in Quantum Key Distribution Via Deep Anomaly Detection

Traditional countermeasures against security side channels in quantum key distribution QKD systems often suffer from poor compatibility with deployed infrastructure, the risk of introducing new vulnerabilities, and limited applicability to specific types of attacks. In this work, we propose an...

Linux Distros Unpatched Vulnerability : CVE-2024-22259

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Applications that use UriComponentsBuilder in Spring Framework to parse an externally provided URL e.g. through a query parameter AND perform validation checks ...

PT-2025-33618 · Google +1 · Android +1

Name of the Vulnerable Software and Affected Versions: BuzzFeed App version 2024.9 Description: A security vulnerability has been detected in BuzzFeed App 2024.9 on Android. The issue affects an unknown part of the file AndroidManifest.xml of the component com.buzzfeed.android, leading to imprope...

CVE-2025-8943

The Custom MCPs feature is designed to execute OS commands, for instance, using tools like npx to spin up local MCP Servers. However, Flowise's inherent authentication and authorization model is minimal and lacks role-based access controls RBAC. Furthermore, in Flowise versions before 3.0.1 the...

Security Bulletin: IBM QRadar Log Source Management app for IBM QRadar SIEM includes components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM QRadar Log Source Management app for IBM QRadar SIEM has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2025-7339 DESCRIPTION: on-headers is ...

Security Bulletin: IBM QRadar Data Synchronization app for IBM QRadar SIEM includes components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM QRadar Data Synchronization app for IBM QRadar SIEM has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2025-7783 DESCRIPTION: Use of...

CVE-2023-5342 Shim: expired secure boot certificate

The Fedora Secure Boot CA certificate shipped with shim in Fedora was expired which could lead to old or invalid signed boot components being loaded...

CVE-2023-5342 Shim: expired secure boot certificate

The Fedora Secure Boot CA certificate shipped with shim in Fedora was expired which could lead to old or invalid signed boot components being loaded...

CVE-2023-5342

CVE-2023-5342 affects the Fedora shim’s Secure Boot validation by an expired Fedora Secure Boot CA certificate shipped with shim. Root cause: expiration of the CA cert used to sign boot components, allowing the loading of old/invalid signed boot components. Impact: potential to load outdated or i...

Linux Distros Unpatched Vulnerability : CVE-2025-37867

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/core: Silence oversized kvmalloc warning syzkaller triggered an oversized kvmalloc warning. Silence it by adding GFPNOWARN. syzkaller log: WARNING: CPU: 7...

Malicious code in zmarta-components (npm)

The package zmarta-components was found to contain malicious code...

Malicious code in vapo-ui-components (npm)

The package vapo-ui-components was found to contain malicious code...

Malicious code in @csid-na/imc3-components (npm)

The package @csid-na/imc3-components was found to contain malicious code...

Malicious code in @azl-react-components/atoms (npm)

The package @azl-react-components/atoms was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in acme-react-components (npm)

The package acme-react-components was found to contain malicious code...

Malicious code in yarn-design-system-react-components (npm)

The package yarn-design-system-react-components was found to contain malicious code...

Malicious code in frankly-components (npm)

The package frankly-components was found to contain malicious code...

Malicious code in eract-native-components (npm)

The package eract-native-components was found to contain malicious code...

Malicious code in reatc-native-components (npm)

The package reatc-native-components was found to contain malicious code...

Malicious code in kinopoisk-components (npm)

The package kinopoisk-components was found to contain malicious code...