Lucene search
+L

2473 matches found

Packet Storm News
Packet Storm News
added 2025/09/22 12:0 a.m.12 views

A Comparative Analysis of Ensemble-Based Machine Learning Approaches with Explainable AI for Multi-Class Intrusion Detection in Drone Networks

The growing integration of drones into civilian, commercial, and defense sectors introduces significant cybersecurity concerns, particularly with the increased risk of network-based intrusions targeting drone communication protocols. Detecting and classifying these intrusions is inherently...

6.6AI score
SaveExploits0
OSV
OSV
added 2025/09/16 7:57 a.m.4 views

MAL-2025-47360 Malicious code in verror-extra (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a93fdd891eeff42ebf7abff1e7a6a00febbc8420ef4bef6c613ef250f4f3ca3 Any computer that has this package installed or running should be considered fully compromised. All...

7.1AI score
SaveExploits0References7
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/09/16 7:57 a.m.6 views

Malicious code in verror-extra (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a93fdd891eeff42ebf7abff1e7a6a00febbc8420ef4bef6c613ef250f4f3ca3 Any computer that has this package installed or running should be considered fully compromised. All...

7.1AI score
SaveExploits0References7
Cvelist
Cvelist
added 2025/09/15 10:35 p.m.21 views

CVE-2025-43333

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to gain root privileges...

0.00321EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/15 10:34 p.m.33 views

CVE-2025-43317

CVE-2025-43317 describes a permissions issue in Apple platforms. The vulnerability may allow an app to access sensitive user data and is fixed in visionOS 26, tvOS 26, iOS 26, iPadOS 26, and watchOS 26. The CVSS data indicate a local attack vector with low attack complexity, no privileges require...

5.5CVSS5.8AI score0.00209EPSS
SaveExploits0References8Affected Software6
NVD
NVD
added 2025/09/15 3:15 p.m.8 views

CVE-2023-53213

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: slab-out-of-bounds read in brcmfgetassocies Fix a slab-out-of-bounds read that occurs in kmemdup called from brcmfgetassocies. The bug could occur when associnfo-reqlen, data from a URB provided by a USB device, i...

8.1CVSS0.00223EPSS
SaveExploits0References9
OSV
OSV
added 2025/09/15 2:21 p.m.5 views

CVE-2023-53213 wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: slab-out-of-bounds read in brcmfgetassocies Fix a slab-out-of-bounds read that occurs in kmemdup called from brcmfgetassocies. The bug could occur when associnfo-reqlen, data from a URB provided by a USB device, i...

8.1CVSS5.5AI score
SaveExploits0References12
Snyk
Snyk
added 2025/09/15 7:39 a.m.2 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...

9.8CVSS7AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/09/15 12:0 a.m.5 views

PT-2025-37833

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Sequoia 15.7 macOS versions prior to Sonoma 14.8 macOS versions prior to Tahoe 26 Description: A file quarantine bypass existed due to missing checks, potentially allowing an application to escape its sandbox...

5.2CVSS6.4AI score0.00174EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2025/09/11 1:52 a.m.7 views

kernel: ext4: use-after-free in ext4_xattr_set_entry()

A use-after-free vulnerability was found in the Linux kernel's ext4 filesystem in the way it handled the extra inode size for extended attributes. This flaw allows a privileged local user to cause a system crash or other undefined behaviors...

6.7CVSS6.7AI score0.00242EPSS
SaveExploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/09/05 5:10 p.m.7 views

Malicious code in nohack-erlinglingba-extra-part2 (npm)

The package nohack-erlinglingba-extra-part2 was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
added 2025/09/05 5:10 p.m.1 views

MAL-2025-45339 Malicious code in nohack-erlinglingba-extra-part1 (npm)

The package nohack-erlinglingba-extra-part1 was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/09/05 5:10 p.m.3 views

Malicious code in nohack-erlinglingba-extra-part1 (npm)

The package nohack-erlinglingba-extra-part1 was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
added 2025/09/05 5:10 p.m.2 views

MAL-2025-45340 Malicious code in nohack-erlinglingba-extra-part2 (npm)

The package nohack-erlinglingba-extra-part2 was found to contain malicious code...

7AI score
SaveExploits0
FreeBSD
FreeBSD
added 2025/09/05 12:0 a.m.11 views

mongodb -- Malformed $group Query May Cause MongoDB Server to Crash

[email protected] reports: An authorized user can cause a crash in the MongoDB Server through a specially crafted $group query. This vulnerability is related to the incorrect handling of certain accumulator functions when additional parameters are specified within the $group operation. This...

6.5CVSS6.7AI score0.0031EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/09/05 12:0 a.m.9 views

PT-2025-36331

Name of the Vulnerable Software and Affected Versions: MongoDB Server versions prior to 6.0.25 MongoDB Server versions prior to 7.0.22 MongoDB Server versions prior to 8.0.12 MongoDB Server versions prior to 8.1.2 Description: An authorized user can cause a crash in the MongoDB Server through a...

6.5CVSS6.3AI score0.0031EPSS
SaveExploits0References10
RedhatCVE
RedhatCVE
added 2025/09/04 10:32 p.m.6 views

CVE-2024-49722

In showAvatarPicker of EditUserPhotoController.java, there is a possible cross user image leak due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.4AI score0.00111EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/09/04 10:32 p.m.10 views

CVE-2025-22430

In isInSignificantPlace of multiple files, there is a possible way to access sensitive information due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.4AI score0.00096EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/04 7:15 p.m.8 views

CVE-2025-48529

In setRingtoneUri of VoicemailNotificationSettingsUtil.java , there is a possible cross user data leak due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS0.00083EPSS
SaveExploits0References2
NVD
NVD
added 2025/09/04 7:15 p.m.26 views

CVE-2025-48530

In multiple locations, there is a possible condition that results in OOB accesses due to an incorrect bounds check. This could lead to remote code execution in combination with other bugs, with no additional execution privileges needed. User interaction is not needed for exploitation...

8.1CVSS0.00501EPSS
SaveExploits0References1
Rows per page
Query Builder