7980 matches found
SafePickle: Robust and Generic ML Detection of Malicious Pickle-Based ML Models
Model repositories such as Hugging Face increasingly distribute machine learning artifacts serialized with Python's pickle format, exposing users to remote code execution RCE risks during model loading. Recent defenses, such as PickleBall, rely on per-library policy synthesis that requires comple...
Malicious OpenClaw Skills Used to Distribute Atomic macOS Stealer
Malicious OpenClaw skills trick AI agents and users into installing a new AMOS variant that steals extensive data at scale...
CVE-2026-26101 Incorrect Permission Assignment for Critical Resource in Owl opds
Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request...
PT-2026-21263
Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request...
Gogs 安全漏洞
Gogs Go Git Service is a Go-based self-service Git hosting service developed by the Gogs team. It supports creating and migrating public/private repositories, as well as adding and removing repository collaborators. Gogs versions 0.13.4 and earlier have security vulnerabilities; these...
Comparison of Security Mechanisms of Mathematical Cipher, Wyner Scheme, QKD, and Quantum Stream Cipher
A new generation of global communications technology has been emerging. These systems, which utilize established device technologies and quantum effect devices, require ultra-high speeds, low cost, and strong security. In recent years, global communication systems have faced various practical...
Sparse Autoencoders Are Capable LLM Jailbreak Mitigators
Jailbreak attacks remain a persistent threat to large language model safety. We propose Context-Conditioned Delta Steering CC-Delta, an SAE-based defense that identifies jailbreak-relevant sparse features by comparing token-level representations of the same harmful request with and without...
The vulnerability of the f2fs_mapblocks() function in the fs/f2fs/data.c module of the F2FS file system in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the f2fsmapblocks function in the fs/f2fs/data.c module of the F2FS file system in the Linux operating system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a perpetrator to cause service failures...
Rethinking Security of Diffusion-Based Generative Steganography
Generative image steganography is a technique that conceals secret messages within generated images, without relying on pre-existing cover images. Recently, a number of diffusion model-based generative image steganography DM-GIS methods have been introduced, which effectively combat traditional...
The vulnerability of the bcmgenetdesc_rx() function in the drivers/net/ethernet/broadcom/genet/bcmgenet.c file of the Ethernet network adapter driver for Broadcom-based Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the bcmgenetdescrx function in the drivers/net/ethernet/broadcom/genet/bcmgenet.c file of the Broadcom Ethernet network adapter driver for the Linux operating system is related to the distribution of resources without any restrictions or regulation. Exploiting this...
The vulnerability of the radeon_atombios_fini() function in the drivers/gpu/drm/radeon/radeon_device.c driver of the Direct Rendering Infrastructure (DRI) graphics card for Linux kernel cores allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the radeonatombiosfini function in the drivers/gpu/drm/radeon/radeondevice.c file of the DRI graphics card driver for Linux operating systems is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow an...
Malicious code in hardixx-code (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 c0eeb07f1a0f9149c6e22016d85bcc59e5d0bbbac9514fbef9a2ba0289bf75fe Version 1.0.2 introduced loading obfuscated code during importing the module. However, distributions uploaded to PyPI lack the necessary file storing the code...
The vulnerability of the posix_timer_by_id() function in the kernel/time/posix-timers.c module of the Linux operating system’s timer subsystem allows a malicious actor to cause a service failure.
The vulnerability of the posixtimerbyid function in the kernel/time/posix-timers.c module of the Linux timer subsystem relates to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a perpetrator to cause a service failure...
Debian dsa-6124 : libwireshark-data - security update
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6124 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6124-1 [email protected] https://www.debian.org/securit...
The vulnerability of the `find_or_create_cached_dir()` function in the fs/smb/client/cached_dir.c module allows a hacker to cause a service failure in Linux-based operating systems with SMB kernel support.
The vulnerability of the findorcreatecacheddir function in the fs/smb/client/cacheddir.c module, which is part of the SMB client kernel support for Linux operating systems, relates to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow ...
The vulnerability of the `udp_tunnel_nic_netdevice_event()` function in the `net/ipv4/udp_tunnel_nic.c` module of the Linux operating system’s IPv4 protocol implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the udptunnelnicnetdeviceevent function in the net/ipv4/udptunnelnic.c module of the Linux kernel’s IPv4 protocol implementation is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the copy_highpage() function in the arch/arm64/mm/copypage.c module, which is part of the ARM 64-bit kernel support for the Linux operating system, allows a hacker to trigger a service failure.
The vulnerability of the copyhighpage function in the arch/arm64/mm/copypage.c module of the Linux operating system’s ARM 64-bit kernel supports is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability allows a remote attacker to cause...
TeamViewer DEX Client Input Validation Error Vulnerability
TeamViewer DEX Client is a digital employee experience and endpoint management software from TeamViewer Germany. An input validation error vulnerability exists in TeamViewer DEX Client versions prior to 26.1, which stems from a lack of validation of user control values in Content Distribution...
TeamViewer DEX Client Buffer Overflow Vulnerability
TeamViewer DEX Client is a digital employee experience and endpoint management software from TeamViewer Germany. TeamViewer DEX Client prior to version 26.1 suffers from a buffer overflow vulnerability that stems from the Content Distribution Service's UDP command processor failing to correctly...
Debian dsa-6121 : libtomcat11-embed-java - security update
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6121 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6121-1 [email protected] https://www.debian.org/securit...