Bandit on the Hunt: Dynamic Crawling for Cyber Threat Intelligence

Public information contains valuable Cyber Threat Intelligence CTI that is used to prevent future attacks. While standards exist for sharing this information, much appears in non-standardized news articles or blogs. Monitoring online sources for threats is time-consuming and source selection is...

A Collaborative Intrusion Detection System Using Snort IDS Nodes

Intrusion Detection Systems IDSs are integral to safeguarding networks by detecting and responding to threats from malicious traffic or compromised devices. However, standalone IDS deployments often fall short when addressing the increasing complexity and scale of modern cyberattacks. This paper...

Integrating Graph Theoretical Approaches in Cybersecurity Education CSCI-RTED

As cybersecurity threats continue to evolve, the need for advanced tools to analyze and understand complex cyber environments has become increasingly critical. Graph theory offers a powerful framework for modeling relationships within cyber ecosystems, making it highly applicable to cybersecurity...

Application of Deep Reinforcement Learning for Intrusion Detection in Internet of Things: a Systematic Review

The Internet of Things IoT has significantly expanded the digital landscape, interconnecting an unprecedented array of devices, from home appliances to industrial equipment. This growth enhances functionality, e.g., automation, remote monitoring, and control, and introduces substantial security...

Q-FAKER: Query-Free Hard Black-Box Attack Via Controlled Generation

Many adversarial attack approaches are proposed to verify the vulnerability of language models. However, they require numerous queries and the information on the target model. Even black-box attack methods also require the target model's output information. They are not applicable in real-world...

aaa-ml-datasets-course (1.0.0), aait (>=0.0.4.80, <=2.0.2) +2617 more potentially affected by CVE-2025-3730 via torch (>=2.0.0, <=2.7.1)

torch PYPI version =2.0.0, =0.0.4.80, =0.2.1, =1.0.0, =0.1.0, =1.1.0, =0.4.6, =0.0.1, =0.1.0, =1.0.0.3, =0.0.0, =0.0.5.5 and more Source cves: CVE-2025-3730 Source advisory: SNYK:PYTHON-TORCH-9726944...

Provable Secure Steganography Based on Adaptive Dynamic Sampling

The security of private communication is increasingly at risk due to widespread surveillance. Steganography, a technique for embedding secret messages within innocuous carriers, enables covert communication over monitored channels. Provably Secure Steganography PSS is state of the art for making...

Secure Transfer Learning: Training Clean Models against Backdoor in (Both) Pre-Trained Encoders and Downstream Datasets

Transfer learning from pre-trained encoders has become essential in modern machine learning, enabling efficient model adaptation across diverse tasks. However, this combination of pre-training and downstream adaptation creates an expanded attack surface, exposing models to sophisticated backdoor...

CVE-2025-29916

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Datasets declared in rules have an option to specify the hashsize to use. This size setting isn't properly limited, so the hash table allocation can be large. Untrusted rules can...

aaa-ml-datasets-course (1.0.0), aana (>=0.2.1, <=0.2.2.2) +2115 more potentially affected by CVE-2025-3001 via torch (>=2.0.0, <=2.5.1)

torch PYPI version =2.0.0, =0.2.1, =1.0.0, =0.1.0, =1.1.0, =0.4.6, =0.0.1, =0.0.0, =1.0.1, =2.1.1, =2.3.1 - acscend 1.0.0 - adabmdca 0.1.5 and more Source cves: CVE-2025-3001 Source advisory: OSV:PYSEC-2025-195...

aaa-ml-datasets-course (1.0.0), aait (>=0.0.4.80, <=2.0.2) +3007 more potentially affected by CVE-2025-2999 via torch (>=2.0.0, <=2.9.1)

torch PYPI version =2.0.0, =0.0.4.80, =0.2.1, =1.0.0, =0.1.0, =1.1.0, =0.4.6, =0.0.1, =1.14.0.post1, =0.1.0, =1.0.0.3, =1.0.0.5 and more Source cves: CVE-2025-2999 Source advisory: SNYK:PYTHON-TORCH-10332645...

aaa-ml-datasets-course (1.0.0), aana (>=0.2.1, <=0.2.2.2) +2115 more potentially affected by CVE-2025-3000 via torch (>=2.0.0, <=2.5.1)

torch PYPI version =2.0.0, =0.2.1, =1.0.0, =0.1.0, =1.1.0, =0.4.6, =0.0.1, =0.0.0, =1.0.1, =2.1.1, =2.3.1 - acscend 1.0.0 - adabmdca 0.1.5 and more Source cves: CVE-2025-3000 Source advisory: OSV:PYSEC-2025-194...

WordPress Datasets Manager 1.5 Shell Upload

WordPress Datasets Manager plugin versions 1.5 and below suffer from a remote shell upload vulnerability...

Cybertron Reshapes AI Security as “Cyber Brain” Grows

Previously exclusive to Trend Vision One customers, select Trend Cybertron models, datasets and agents are now available via open-source. Build advanced security solutions and join us in developing the next generation of AI security technology...

lunary access control error vulnerability (CNVD-2025-07602)

lunary is lunary open source a production toolkit for LLM . An access control error vulnerability exists in lunary, which stems from improper access control on the /v1/datasets endpoint, and can be exploited by an attacker to gain access to unauthorized datasets...

Exploit for CVE-2024-52375

WordPress Datasets Manager 💥 Exploit by: Nxploit Khaled Alen...

CVE-2024-10272 Broken Access Control in lunary-ai/lunary

lunary-ai/lunary is vulnerable to broken access control in the latest version. An attacker can view the content of any dataset without any kind of authorization by sending a GET request to the /v1/datasets endpoint without a valid authorization token...

CVE-2024-10272

lunary-ai/lunary is vulnerable to broken access control in the latest version. An attacker can view the content of any dataset without any kind of authorization by sending a GET request to the /v1/datasets endpoint without a valid authorization token...

CVE-2024-10272 Broken Access Control in lunary-ai/lunary

lunary-ai/lunary is vulnerable to broken access control in the latest version. An attacker can view the content of any dataset without any kind of authorization by sending a GET request to the /v1/datasets endpoint without a valid authorization token...

Lunary security vulnerabilities

lunary is lunary open source a production toolkit for LLM . An access control error vulnerability exists in lunary, which stems from improper access control on the /v1/datasets endpoint, and can be exploited by an attacker to gain access to unauthorized datasets...