Exploit for Improper Handling of Case Sensitivity in Vmware Spring_Framework

CVE-2024-38820 Proof of Concept Overview This project dem...

EUVD-2009-3228

Malicious code in bioql PyPI...

EUVD-2021-32749

Malicious code in bioql PyPI...

EUVD-2011-1657

Malicious code in bioql PyPI...

EUVD-2006-4144

Malicious code in bioql PyPI...

EUVD-2025-26496

Malicious code in bioql PyPI...

EUVD-2022-41232

Malicious code in bioql PyPI...

EUVD-2024-3496

Malicious code in bioql PyPI...

01os (=0.0.14), 21cmpsdenoiser (>=1.0.0 <=1.0.2) +24551 more potentially affected by CVE-2025-55557 via torch (>=2.0.0 <=2.7.1)

torch PYPI version =2.0.0, =1.0.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.10.5, =0.1.0.dev1, =1.0.0, =1.2.0 and more Source cves: CVE-2025-55557 Source advisory: SNYK:PYTHON-TORCH-13052977...

3m (=0.1.0), aaa-ml-datasets-course (=1.0.0) +1855 more potentially affected by CVE-2025-6638 via transformers (>=2.10.0 <=4.52.4)

transformers PYPI version =2.10.0, =0.0.4.80, =0.1.0, =0.1.1, =0.1.0, =0.0.3, =0.0.1, =0.0.0.dev20230804, =0.1.0, =0.3.0, =0.1.0, =0.2.5, =0.2.11 and more Source cves: CVE-2025-6638 Source advisory: OSV:GHSA-59P9-H35M-WG4G...

Mind the Gap: Evaluating Model- and Agentic-Level Vulnerabilities in LLMs with Action Graphs

As large language models transition to agentic systems, current safety evaluation frameworks face critical gaps in assessing deployment-specific risks. We introduce AgentSeer, an observability-based evaluation framework that decomposes agentic executions into granular action and component graphs,...

ai.h2o:h2o-admissibleml (>=3.34.0.1 <=3.46.0.11), ai.h2o:h2o-algos (>=3.0.0.5 <=3.46.0.11) +44 more potentially affected by CVE-2025-5662 via ai.h2o:h2o-core (>=3.0.0.12 <=3.46.0.7)

ai.h2o:h2o-core MAVEN version =3.0.0.12, =3.34.0.1, =3.0.0.5, =3.0.0.5, =3.12.0.1, =3.10.0.1, =3.14.0.7, =3.16.0.1, =3.14.0.1, =3.24.0.1, =3.30.1.1, =3.26.0.4, =3.10.5.1, =3.24.0.1, =3.30.0.1, =3.34.0.3, =3.46.0.11 and more Source cves: CVE-2025-5662 Source advisory: SNYK:JAVA-AIH2O-12485437...

GHSA-G5QG-72QW-GW5V Next.js Affected by Cache Key Confusion for Image Optimization API Routes

A vulnerability in Next.js Image Optimization has been fixed in v15.4.5 and v14.2.31. When images returned from API routes vary based on request headers such as Cookie or Authorization, these responses could be incorrectly cached and served to unauthorized users due to a cache key confusion bug...

com.ritense.valtimo:besluit (>=10.0.0.RELEASE <=12.15.1.RELEASE), com.ritense.valtimo:besluiten-api (>=0.1.0-RC-2 <=12.15.1.RELEASE) +61 more potentially affected by CVE-2025-58059 via com.ritense.valtimo:core (>=0.1.0-RC-2 <=12.15.1.RELEASE)

com.ritense.valtimo:core MAVEN version =0.1.0-RC-2, =10.0.0.RELEASE, =0.1.0-RC-2, =0.1.0-RC-2, =10.0.0.RELEASE, =0.1.0-RC-2, =0.1.0-RC-2, =0.1.0-RC-2, =10.0.0.RELEASE, =0.1.0-RC-2, =10.0.0.RELEASE, =10.0.0.RELEASE, =0.1.0-RC-2, =10.0.0.RELEASE, =10.0.0.RELEASE, =12.15.1.RELEASE and more Source...

Linux Distros Unpatched Vulnerability : CVE-2013-4441

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Phonemes mode in Pwgen 2.06 generates predictable passwords, which makes it easier for context- dependent attackers to guess the password via a brute-force...

CVE-2025-57761

WeGIA is a Web manager for charitable institutions. Prior to 3.4.10, there is a SQL Injection vulnerability in the /html/funcionario/dependenteremover.php endpoint, specifically in the idfuncionario parameter. This vulnerability allows attackers to execute arbitrary SQL commands, compromising the...

The Practical Issues of Side-Channel-Secure Quantum Key Distribution

Quantum Key Distribution QKD leverages the principles of quantum mechanics to provide theoretically unconditional security for cryptographic key sharing. However, practical implementations remain vulnerable due to non-ideal devices and potential security loopholes at both the source and detection...

Linux Distros Unpatched Vulnerability : CVE-2019-12384

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FasterXML jackson-databind 2.x before 2.9.9.1 might allow attackers to have a variety of impacts by leveraging failure to block the logback-core class from...

Linux Distros Unpatched Vulnerability : CVE-2018-14521

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in aubio 0.4.6. A SEGV signal can occur in aubiosourceavcodecreadframe in io/sourceavcodec.c, as demonstrated by aubiomfcc. CVE-2018-145...

Linux Distros Unpatched Vulnerability : CVE-2020-5421

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks...