Lucene search
+L

603 matches found

Packet Storm News
Packet Storm News
added 2026/01/23 12:0 a.m.31 views

TrojanGYM: A Detector-In-The-Loop LLM for Adaptive RTL Hardware Trojan Insertion

Hardware Trojans HTs remain a critical threat because learning-based detectors often overfit to narrow trigger/payload patterns and small, stylized benchmarks. We introduce TrojanGYM, an agentic, LLM-driven framework that automatically curates HT insertions to expose detector blind spots while...

5.9AI score
SaveExploits0
GithubExploit
GithubExploit
added 2026/01/17 12:21 p.m.296 views

Exploit for CVE-2025-36911

This is not an exploit for CVE-20...

7.1CVSS7AI score0.06942EPSS
SaveExploits14
RedhatCVE
RedhatCVE
added 2026/01/09 9:55 a.m.8 views

CVE-2020-12122

In Max Secure Max Spyware Detector 1.0.0.044, the driver file MaxProc64.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x2200019. This also extends to the various other products from Max Secure...

7.8CVSS7.4AI score0.00466EPSS
SaveExploits1References1
GithubExploit
GithubExploit
added 2026/01/04 11:26 a.m.188 views

Exploit for Improper Handling of Length Parameter Inconsistency in Mongodb

Mongobleed-D...

8.7CVSS7.3AI score0.83007EPSS
SaveExploits39
GithubExploit
GithubExploit
added 2026/01/02 5:4 a.m.184 views

vulnerability-detector-platform

No d...

7AI score
SaveExploits0
GithubExploit
GithubExploit
added 2025/12/29 10:36 a.m.184 views

Exploit for CVE-2025-14847

CYBERDUDEBIVASH MONGODB DETECTOR TOOL v2026.1 Detect expose...

8.7CVSS7AI score0.83007EPSS
SaveExploits39
GithubExploit
GithubExploit
added 2025/12/25 6:3 p.m.193 views

sql-injection-detector

No d...

7AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/12/24 12:0 a.m.9 views

PT-2025-53131

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a memory leak in the kexec functionality related to the ELF header buffer. The issue is identified by the kmemleak detector and occurs during the elf kexec load...

6.6AI score0.00206EPSS
SaveExploits0References5
Packet Storm News
Packet Storm News
added 2025/12/16 12:0 a.m.26 views

Cloud Security Leveraging AI: A Fusion-Based AISOC for Malware and Log Behaviour Detection

Cloud Security Operations Center SOC enable cloud governance, risk and compliance by providing insights visibility and control. Cloud SOC triages high-volume, heterogeneous telemetry from elastic, short-lived resources while staying within tight budgets. In this research, we implement an...

6.8AI score
SaveExploits0
GithubExploit
GithubExploit
added 2025/12/08 6:25 p.m.217 views

Exploit for Deserialization of Untrusted Data in Facebook React

React2Shell Detector A Chrome extension for detecting React2S...

10CVSS7AI score0.99616EPSS
SaveExploits395
GithubExploit
GithubExploit
added 2025/12/06 12:36 a.m.171 views

Exploit for Deserialization of Untrusted Data in Facebook React

RSC/Next.js RCE Vulnerability Detector & PoC Chrome Extensio...

10CVSS7AI score0.99616EPSS
SaveExploits395
Packet Storm News
Packet Storm News
added 2025/11/12 12:0 a.m.30 views

One Signature, Multiple Payments: Demystifying and Detecting Signature Replay Vulnerabilities in Smart Contracts

Smart contracts have significantly advanced blockchain technology, and digital signatures are crucial for reliable verification of contract authority. Through signature verification, smart contracts can ensure that signers possess the required permissions, thus enhancing security and scalability...

6.9AI score
SaveExploits0
Snyk
Snyk
added 2025/11/01 6:30 a.m.2 views

Improper Input Validation

Overview dataproduct-mcp is an A Model Context Protocol MCP server for discovering data products, requesting access, and executing queries on the data platform to access business data. Affected versions of this package are vulnerable to Improper Input Validation due to the detector being disabled...

6.9CVSS6.9AI score
SaveExploits0References3
Packet Storm News
Packet Storm News
added 2025/10/31 12:0 a.m.8 views

Coordinated Position Falsification Attacks and Countermeasures for Location-Based Services

With the rise of location-based service LBS applications that rely on terrestrial and satellite infrastructures e.g., GNSS and crowd-sourced Wi-Fi, Bluetooth, cellular, and IP databases for positioning, ensuring their integrity and security is paramount. However, we demonstrate that these...

6.7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/10/30 12:0 a.m.3 views

ArcGIS Server HTTP Detection

Binary data arcgisserverhttpdetect.nbin...

7AI score
SaveExploits0References1
Snyk
Snyk
added 2025/10/16 7:51 a.m.4 views

Malicious Package

Overview eslint-detector is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References3
Packet Storm News
Packet Storm News
added 2025/10/15 12:0 a.m.23 views

RoBCtrl: Attacking GNN-Based Social Bot Detectors Via Reinforced Manipulation of Bots Control Interaction

Social networks have become a crucial source of real-time information for individuals. The influence of social bots within these platforms has garnered considerable attention from researchers, leading to the development of numerous detection technologies. However, the vulnerability and robustness...

6.8AI score
SaveExploits0
CNVD
CNVD
added 2025/10/13 12:0 a.m.12 views

WordPress Comment Info Detector plugin cross-site request forgery vulnerability

WordPress Comment Info Detector plugin is a WordPress plugin for displaying commenter browser and operating system information, developed by Kyle Baker. The WordPress Comment Info Detector plugin suffers from a cross-site request forgery vulnerability that stems from the options.php file not...

4.3CVSS6.9AI score0.00136EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
added 2025/10/08 12:0 a.m.9 views

A Multi-Layered Embedded Intrusion Detection Framework for Programmable Logic Controllers

Industrial control system ICS operations use trusted endpoints like human machine interfaces HMIs and workstations to relay commands to programmable logic controllers PLCs. Because most PLCs lack layered defenses, compromise of a trusted endpoint can drive unsafe actuator commands and risk...

7AI score
SaveExploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2014-1261

Malware in sbrugna...

7.5CVSS5AI score0.00864EPSS
SaveExploits0References5
Rows per page
Query Builder