132 matches found
CVE-2020-36708
CVE-2020-36708 – WordPress Epsilon Framework 関数インジェクション PoC 概要 CVE-2020-36708 は WordPress 用 Epsilon Framework の脆弱性であり、認証されていない攻撃者が AJAX アクション epsilonframeworkajaxaction を介して任意の PHP クラスメソッドを呼び出せるようにします。 この問題は、攻撃者が以下の両方を制御できるため、関数インジェクション脆弱性 に分類されます。 呼び出すクラス （例: Requests） 呼び出すメソッド （例:...
WordPress Epsilon Framework Themes <=2.4.8 - Remote Code Execution
WordPress themes including Shapely = 1.2.7, NewsMag = 2.4.1, Activello = 1.4.0, Illdy = 2.1.4, Allegiant = 1.2.2, Newspaper X = 1.3.1, Pixova Lite = 2.0.5, Brilliance = 1.2.7, MedZone Lite = 1.2.4, Regina Lite = 2.0.4, Transcend = 1.1.8, Affluent = 1.1.0, Bonkers = 1.0.4, Antreas = 1.0.2, Sparkli...
Malicious Package
Overview benchmark-deserialize-mu-epsilon-shell is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...
CVE-2026-43928 FOSSBilling: Payment amount not validated in PayPalEmail adapter allows invoice underpayment
FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, the PayPalEmail payment adapter accepts PayPal IPN callbacks and credits the IPN-supplied amount mcgross to the client's balance without validating it against the invoice total. Combined with a $0.05...
CVE-2026-43928 FOSSBilling: Payment amount not validated in PayPalEmail adapter allows invoice underpayment
FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, the PayPalEmail payment adapter accepts PayPal IPN callbacks and credits the IPN-supplied amount mcgross to the client's balance without validating it against the invoice total. Combined with a $0.05...
Malicious Package
Overview turbo-axios is a malicious package. This package contains malicious code associated with the Epsilon Stealer malware campaign. While this package attempts to impersonate a legitimate performance-enhanced version of the axios HTTP client, there is no connection between the axios project o...
Malicious Package
Overview faster-axios is a malicious package. This package contains malicious code associated with the Epsilon Stealer malware campaign. While this package attempts to impersonate a legitimate performance-enhanced version of the axios HTTP client, there is no connection between the axios project ...
Evaluating Differential Privacy against Membership Inference in Federated Learning: Insights from the NIST Genomics Red Team Challenge
While Federated Learning FL mitigates direct data exposure, the resulting trained models remain susceptible to membership inference attacks MIAs. This paper presents an empirical evaluation of Differential Privacy DP as a defense mechanism against MIAs in FL, leveraging the environment of the 202...
Optimizing Epsilon Security Parameters in QKD
We investigate the optimization of epsilon-security parameters in quantum key distribution QKD, aiming to improve the achievable secure key rate under a fixed overall composable security level. For this purpose, we employ a continuous genetic algorithm CGA to optimize the epsilon-security...
EUVD-2025-179091
Malicious code in epsilon-execute-pi-interpret-index npm...
EUVD-2025-178374
Malicious code in interface-awk-balance-epsilon-orchestrate npm...
EUVD-2025-179418
Malicious code in daemon-epsilon-hash-link-slow npm...
Malicious code in air-epsilon-zeta-key-bundle (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3315bade14bc91e0c028f375cddafcc7a08630f221281feff53d52abe8355d54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in upsilon-fast-epsilon-optimize-interface (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d653fcaa0c2e1a74b8bf8126b95ed3b9284be21d307f766a0df8c77a468db28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178901
Malicious code in final-secure-epsilon-catch-book npm...
EUVD-2025-179095
Malicious code in epsilon-bash-sigma-tree-scale npm...
EUVD-2025-179090
Malicious code in epsilon-protected-reject-parse-benchmark npm...
EUVD-2025-179089
Malicious code in epsilon-web-sun-test-easy npm...