SUSE: Security Advisory (SUSE-SU-2025:1324-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not properly determining the user-space replication environment, which could lead to incorrect handling...

Towards Explainable and Lightweight AI for Real-Time Cyber Threat Hunting in Edge Networks

As cyber threats continue to evolve, securing edge networks has become increasingly challenging due to their distributed nature and resource limitations. Many AI-driven threat detection systems rely on complex deep learning models, which, despite their high accuracy, suffer from two major...

Everything You Wanted to Know about LLM-Based Vulnerability Detection but Were Afraid to Ask

Large Language Models are a promising tool for automated vulnerability detection, thanks to their success in code generation and repair. However, despite widespread adoption, a critical question remains: Are LLMs truly effective at detecting real-world vulnerabilities? Current evaluations, which...

CVE-2025-39436

creationtimestamp| type| source ---|---|--- 2025-04-17 16:48:48+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114354325261385044 2025-04-17 18:24:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmzq3clqkt2v 2025-04-20 05:00:06+00:00| published-proof-of-concept...

CVE-2025-24539 WordPress DeBounce Email Validator plugin <= 5.6.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in debounce DeBounce Email Validator debounce-io-email-validator allows Reflected XSS.This issue affects DeBounce Email Validator: from n/a through = 5.6.5...

CVE-2025-3453

creationtimestamp| type| source ---|---|--- 2025-04-17 12:00:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12209 2025-04-17 14:49:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmze2insk32a 2025-04-17 17:09:33+00:00| seen| https://t.me/cvedetector/23230...

CVE-2025-2188

creationtimestamp| type| source ---|---|--- 2025-04-17 09:59:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12203 2025-04-17 10:48:39+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114352909015220786 2025-04-17 10:48:54+00:00| seen|...

MAL-2025-3255 Malicious code in helper-member-expression-to-functions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e46054f993cedcc0d3d1aa68cb5224550c94097ec1d867f3d8dba501da7963f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3252 Malicious code in helper-function-name (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf8d6cfb517715467379abc5d1adf9a80f10c786f6473f2d30c9961cba2445b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-21587

creationtimestamp| type| source ---|---|--- 2025-04-17 04:57:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12182 2025-05-10 17:41:14+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lotiff2hm22y 2025-05-11 02:21:12+00:00| seen|...

MAL-2025-3247 Malicious code in fatfingers-helloo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 473958a91938ac87fe7925feadb207cc144a2e7e1d9cfe7f13029190825091e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3240 Malicious code in fatfingers-hahayeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab10b9a2ff027ef8bfac4c8953e64c6a24e799afecb082e727da93d58fd0cb47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3232 Malicious code in bespoke-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50c8574065c05dfb54a421ce73341ceff847e8acdccdc1a8e800d12e6aee9f05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DYNAMITE: Dynamic Defense Selection for Enhancing Machine Learning-Based Intrusion Detection against Adversarial Attacks

The rapid proliferation of the Internet of Things IoT has introduced substantial security vulnerabilities, highlighting the need for robust Intrusion Detection Systems IDS. Machine learning-based intrusion detection systems ML-IDS have significantly improved threat detection capabilities; however...

PT-2025-17203 · Foxcms · Foxcms

Name of the Vulnerable Software and Affected Versions: FOXCMS versions 1.25 and earlier Description: The issue concerns a time-based blind SQL injection vulnerability in the installdb.php file. The url prefix, domain, and my website POST parameters are directly concatenated into SQL statements...

Malicious Code Detection in Smart Contracts Via Opcode Vectorization

With the booming development of blockchain technology, smart contracts have been widely used in finance, supply chain, Internet of things and other fields in recent years. However, the security problems of smart contracts become increasingly prominent. Security events caused by smart contracts...

ArtistAuditor: Auditing Artist Style Pirate in Text-To-Image Generation Models

Text-to-image models based on diffusion processes, such as DALL-E, Stable Diffusion, and Midjourney, are capable of transforming texts into detailed images and have widespread applications in art and design. As such, amateur users can easily imitate professional-level paintings by collecting an...

CVE-2025-20178

creationtimestamp| type| source ---|---|--- 2025-04-16 20:14:38+00:00| seen| https://t.me/cvedetector/23146 2025-04-17 04:57:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12186...

CVE-2025-22127

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix potential deadloop in preparecompressoverwrite Jan Prusakowski reported a kernel hang issue as below: When running xfstests on linux-next kernel 6.14.0-rc3, 6.12 I encountered a problem in generic/475 test where fsstres...