org.apache.camel:camel-example-cxf (2.12.2), org.apache.cxf.systests:cxf-systests-jaxrs (2.7.7) +7 more potentially affected by CVE-2025-48913 via org.apache.cxf:cxf-rt-transports-jms (2.7.7)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.7.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf 2.12.2 - org.apache.cxf.systests:cxf-systests-jaxrs...

org.apache.camel:camel-example-cxf (>=1.6.4, <=2.4.0), org.apache.cxf.systests:cxf-systests-jaxrs (2.2.9) +4 more potentially affected by CVE-2025-48913 via org.apache.cxf:cxf-rt-transports-jms (2.2.9)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf =1.6.4, =2.4.0 -...

org.apache.camel:camel-example-cxf (>=2.12.4, <=2.13.2), org.apache.cxf.systests:cxf-systests-jaxrs (2.7.11) +8 more potentially affected by CVE-2025-48913 via org.apache.cxf:cxf-rt-transports-jms (2.7.11)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.7.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf =2.12.4, =0.5.0, =0.5.5 Source cves: CVE-2025-48913...

Onion Site Template Trust Management Vulnerability

Onion Site Template is a self-hosted example from Vessel9817 Individual Developer. Onion Site Template suffers from a trust management issue vulnerability that stems from the inclusion of a fixed tor mirror, which could lead to a compromised website...

br.net.woodstock.rockframework:rockframework-struts (>=2.0.0, <=2.0.8), br.net.woodstock.rockframework:rockframework-web (>=1.2.1, <=3.0.1) +25 more potentially affected by CVE-2025-54656 via org.apache.struts:struts-extras (>=1.3.8, <=1.3.10)

org.apache.struts:struts-extras MAVEN version =1.3.8, =2.0.0, =1.2.1, =0.4.5, =0.4.5, =0.4.5, =0.4.5, =0.4.5, =0.4.5, =0.4.5, =0.4.5, =0.4.5, =2.1.1-rc1, =3.0-beta-1, =3.0.0 and more Source cves: CVE-2025-54656 Source advisory: OSV:GHSA-CX25-XG7C-XFM5...

CVE-2025-43240

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.6, Safari 18. 6. A download's origin may be incorrectly associated...

Malicious code in ethical-ping-example (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-6720 Malicious code in ethical-ping-example (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

JavaDeserH2HC

This repository contains sample codes for the Hackers to Hackers Conference magazine 2017 H2HC. The codes are designed to demonstrate various exploitation techniques, specifically focusing on Java deserialization vulnerabilities. The primary vulnerability class/vector targeted is Java...

Malware in pre-and-postinstall-scripts-example

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

TelegAI Cross Site Scripting

TelegAI, a web application for constructing and chatting with AI Characters, is vulnerable to persistent cross site scripting vulnerabilities in its chat component and character container component. An attacker can achieve arbitrary client-side script execution by crafting an AI Character with SV...

Malicious code in pxsceneui-example-03 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7a2056080eb99ee23c3a6b2689ac55d696a6b788fb2030a60415a006ee3ab16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in pxsceneui-example-03

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-5950 Malicious code in pxsceneui-example-03 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7a2056080eb99ee23c3a6b2689ac55d696a6b788fb2030a60415a006ee3ab16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

HASSLE: a Self-Supervised Learning Enhanced Hijacking Attack on Vertical Federated Learning

Vertical Federated Learning VFL enables an orchestrating active party to perform a machine learning task by cooperating with passive parties that provide additional task-related features for the same training data entities. While prior research has leveraged the privacy vulnerability of VFL to...

io.nixer:nixer-plugin-captcha (>=0.1.0.0, <=0.1.1.3), io.nixer:nixer-plugin-core (>=0.1.0.0, <=0.1.1.3) +3 more potentially affected by CVE-2025-53864 via com.nimbusds:nimbus-jose-jwt (7.5.1)

com.nimbusds:nimbus-jose-jwt MAVEN version 7.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - io.nixer:nixer-plugin-captcha =0.1.0.0, =0.1.0.0, =0.1.0.0, =0.1.1.0, =0.1.1.3 Source cves:...

Malware in example-target-package

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in protobufjs-protify-example

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in protobufjs-websocket-example

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in protobufjs-protify-example (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a1fc26bdc2549188a81eca766317ffb5fdf7c0f904db9df458c43a670a86951 Any computer that has this package installed or running should be considered...