35614 matches found
CVE-2023-54322
In the Linux kernel, the following vulnerability has been resolved: arm64: set exceptionirqentry with irqentry as a default filterirqstacks is supposed to cut entries which are related irq entries from its call stack. And inirqentrytext which is called by filterirqstacks uses irqentrytextstart/en...
CVE-2022-50880
In the Linux kernel, the following vulnerability has been resolved: wifi: ath10k: add peer map clean up for peer delete in ath10kstastate When peer delete failed in a disconnect operation, use-after-free detected by KFENCE in below log. It is because for each vdevid and address, it has only one...
UBUNTU-CVE-2023-54315
In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv/sriov: perform null check on iov before dereferencing iov Currently pointer iov is being dereferenced before the null check of iov which can lead to null pointer dereference errors. Fix this by moving the iov null...
CVE-2023-54322
CVE-2023-54322 (Linux kernel, arm64) : The vulnerability arises in stack trace filtering where filter_irq_stacks() is supposed to drop irq-entry related frames, but on arm64 the irq entry point (gic_handle_irq) is not present when CONFIG_FUNCTION_GRAPH_TRACER is not enabled. This can cause uninte...
CVE-2023-54203 ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-out-of-bounds in initsmb2rsphdr When smb1 mount fails, KASAN detect slab-out-of-bounds in initsmb2rsphdr like the following one. For smb1 negotiate56bytes , initsmb2rsphdr for smb2 is called. The issue occurs whil...
CVE-2023-54182 f2fs: fix to check readonly condition correctly
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to check readonly condition correctly With below case, it can mount multi-device image w/ rw option, however one of secondary device is set as ro, later update will cause panic, so let's introduce f2fsdevisreadonly, and...
Apache Tika JAR Detection
Binary data apachetikajardetect.nbin...
FedLiTeCAN : A Federated Lightweight Transformer for Fast and Robust CAN Bus Intrusion Detection
This work implements a lightweight Transformer model for IDS in the domain of Connected and Autonomous Vehicles...
PT-2026-55681
Name of the Vulnerable Software and Affected Versions picklescan versions prior to 0.0.34 Description The software fails to detect the operator.methodcaller built-in function when scanning pickle files for malicious code. This allows attackers to create malicious pickle payloads using...
Jailbreaking Attacks Vs. Content Safety Filters: How Far Are We in the LLM Safety Arms Race?
As large language models LLMs are increasingly deployed, ensuring their safe use is paramount. Jailbreaking, adversarial prompts that bypass model alignment to trigger harmful outputs, present significant risks, with existing studies reporting high success rates in evading common LLMs. However,...
SynRAG: A Large Language Model Framework for Executable Query Generation in Heterogeneous SIEM System
Security Information and Event Management SIEM systems are essential for large enterprises to monitor their IT infrastructure by ingesting and analyzing millions of logs and events daily. Security Operations Center SOC analysts are tasked with monitoring and analyzing this vast data to identify...
Quantum Machine Learning Approaches for Coordinated Stealth Attack Detection in Distributed Generation Systems
Coordinated stealth attacks are a serious cybersecurity threat to distributed generation systems because they modify control and measurement signals while remaining close to normal behavior, making them difficult to detect using standard intrusion detection methods. This study investigates quantu...
Picklescan is vulnerable to RCE via missing detection when calling numpy.f2py.crackfortran.param_eval
Summary Picklescan uses numpy.f2py.crackfortran.parameval, which is a function in numpy to execute remote pickle files. Details The attack payload executes in the following steps: - First, the attacker crafts the payload by calling the numpy.f2py.crackfortran.parameval function via reduce method....
Exploit for CVE-2025-14847
🌊 MongoDeepDive Context-Aware MongoDB Wire Protocol Explo...
Picklescan is vulnerable to RCE through missing detection when calling built-in python operator.methodcaller
Summary Picklescan uses operator.methodcaller, which is a built-in python library function to execute remote pickle files. Details The attack payload executes in the following steps: - First, the attacker crafts the payload by calling the operator.methodcaller function in method reduce. - Then,...
EUVD-2025-205639
Picklescan is vulnerable to RCE through missing detection when calling built-in python operator.methodcaller...
GHSA-X843-G5MX-G377 Picklescan is vulnerable to RCE through missing detection when calling built-in python operator.methodcaller
Summary Picklescan uses operator.methodcaller, which is a built-in python library function to execute remote pickle files. Details The attack payload executes in the following steps: - First, the attacker crafts the payload by calling the operator.methodcaller function in method reduce. - Then,...
EUVD-2025-205587
Picklescan missing detection when calling numpy.f2py.crackfortran.getlincoef...