Lucene search
+L

38335 matches found

Packet Storm News
Packet Storm News
added 2025/06/19 12:00 a.m.11 views

Exploring Traffic Simulation and Cybersecurity Strategies Using Large Language Models

Intelligent Transportation Systems ITS are increasingly vulnerable to sophisticated cyberattacks due to their complex, interconnected nature. Ensuring the cybersecurity of these systems is paramount to maintaining road safety and minimizing traffic disruptions. This study presents a novel...

7.2AI score
SaveExploits0
Packet Storm News
Packet Storm News
added 2025/06/19 12:00 a.m.13 views

The Hitchhiker'S Guide to Efficient, End-To-End, and Tight DP Auditing

This paper systematizes research on auditing Differential Privacy DP techniques, aiming to identify key insights into the current state of the art and open challenges. First, we introduce a comprehensive framework for reviewing work in the field and establish three cross-contextual desiderata tha...

6.9AI score
SaveExploits0
Packet Storm News
Packet Storm News
added 2025/06/19 12:00 a.m.9 views

SAFER-D: a Self-Adaptive Security Framework for Distributed Computing Architectures

The rise of the Internet of Things and Cyber-Physical Systems has introduced new challenges on ensuring secure and robust communication. The growing number of connected devices increases network complexity, leading to higher latency and traffic. Distributed computing architectures DCAs have gaine...

6.8AI score
SaveExploits0
OSV
OSV
added 2025/06/18 11:15 a.m.12 views

DEBIAN-CVE-2022-50029

In the Linux kernel, the following vulnerability has been resolved: clk: qcom: ipq8074: dont disable gccsleepclksrc Once the usb sleep clocks are disabled, clock framework is trying to disable the sleep clock source also. However, it seems that it cannot be disabled and trying to do so produces:...

5.5CVSS5.2AI score0.00166EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/18 11:15 a.m.15 views

UBUNTU-CVE-2022-50192

In the Linux kernel, the following vulnerability has been resolved: spi: tegra20-slink: fix UAF in tegraslinkremove After calling spiunregistermaster, the refcount of master will be decrease to 0, and it will be freed in spicontrollerrelease, the device data also will be freed, so it will lead a...

7.8CVSS6.1AI score0.00221EPSS
SaveExploits0References6
CVE
CVE
added 2025/06/18 11:03 a.m.29 views

CVE-2022-50170

CVE-2022-50170 concerns a memory-leak in the Linux kernel KunIt testing framework (kunit). Specifically, when allocation for 'filtered' fails during kunit_filter_tests, the copied suite could be leaked. The fix ensures 'copy' is freed in the error path for allocation of 'filtered'. Note that a si...

5.5CVSS6.5AI score0.00208EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2025/06/18 11:01 a.m.110 views

CVE-2022-50029

CVE-2022-50029 affects the Linux kernel “clk: qcom: ipq8074: dont disable gcc_sleep_clk_src” issue where the USB sleep clock is disabled while the clock framework tries to disable the sleep clock source, causing a failure. The connected advisories (Unity Linux / Astra Linux / SUSE entries) descri...

5.5CVSS6.4AI score0.00166EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2025/06/18 10:29 a.m.1 views

MAL-2025-5080 Malicious code in framework_boclient (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
NVD
NVD
added 2025/06/17 3:15 p.m.18 views

CVE-2025-49882

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Imran Tauqeer CubeWP cubewp-framework allows DOM-Based XSS.This issue affects CubeWP: from n/a through = 1.1.23...

6.5CVSS0.00159EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/06/17 3:01 p.m.10 views

CVE-2025-49882 WordPress CubeWP Framework plugin <= 1.1.23 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Imran Tauqeer CubeWP cubewp-framework allows DOM-Based XSS.This issue affects CubeWP: from n/a through = 1.1.23...

6.5CVSS5.9AI score0.00159EPSS
SaveExploits0References1
CVE
CVE
added 2025/06/17 3:01 p.m.37 views

CVE-2025-49882

CVE-2025-49882 is a cross-site scripting vulnerability in the WordPress CubeWP Framework, identified as a DOM-based XSS due to improper input neutralization in web page generation. Affected software is CubeWP Framework versions up to and including 1.1.23. Public sources corroborate the issue with...

6.5CVSS5.9AI score0.00159EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/06/17 3:01 p.m.29 views

CVE-2025-49882 WordPress CubeWP Framework plugin <= 1.1.23 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Imran Tauqeer CubeWP cubewp-framework allows DOM-Based XSS.This issue affects CubeWP: from n/a through = 1.1.23...

6.5CVSS0.00159EPSS
SaveExploits0References1
Fedora
Fedora
added 2025/06/17 2:29 a.m.12 views

[SECURITY] Fedora 41 Update: python-django4.2-4.2.22-1.fc41

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

5.3CVSS7.3AI score0.13624EPSS
SaveExploits0
CNVD
CNVD
added 2025/06/17 12:00 a.m.15 views

WordPress Civi Framework plugin cross-site request forgery vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in the WordPress Civi Framework plugin that stems from the WEB application not adequately verifying that a request is from a...

7.1CVSS6.9AI score0.00161EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/06/17 12:00 a.m.16 views

WordPress plugin CubeWP Framework 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6.1AI score0.00159EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/06/17 12:00 a.m.16 views

PT-2025-25736 · Unknown · Cubewp Framework

Name of the Vulnerable Software and Affected Versions: CubeWP Framework versions 1.1.23 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS in the CubeWP Framework...

6.5CVSS6.4AI score0.00159EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
added 2025/06/16 10:41 p.m.14 views

Security Bulletin: Multiple security vulnerabilities in Vite affect IBM Robotic Process Automation (CVE-2025-31125, CVE-2025-32395, CVE-2025-31486).

Summary Multiple security vulnerabilities in Vite affect IBM Robotic Process Automation CVE-2025-31125, CVE-2025-32395, CVE-2025-31486. Vite is used by IBM Robotic Process Automation as part of the UI framework. This bulletin identifies the fixes required to address these vulnerabilities...

7.5CVSS5.5AI score0.58801EPSS
SaveExploits13Affected Software1
AstraLinux
AstraLinux
added 2025/06/16 11:28 a.m.8 views

Astra Linux – Vulnerability in Ruby-Rack

Rack is a modular Ruby web server interface. Prior to versions 2.2.14, 3.0.16, and 3.1.14, Rack::QueryParser parsed query strings and application/x-www-form-urlencoded bodies into Ruby data structures without imposing any limit on the number of parameters. This allowed attackers to send requests...

7.5CVSS6.7AI score0.01157EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2025/06/16 11:28 a.m.8 views

Astra Linux – Vulnerability in qtbase-opensource-src

A issue was discovered in gui/util/qktxhandler.cpp in Qt before 5.15.17, 6.x before 6.2.12, 6.3.x through 6.5.x before 6.5.5, and 6.6.x before 6.6.2. A buffer overflow and application crash can occur due to a crafted KTX image file...

6.2CVSS7.4AI score0.00321EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2025/06/16 11:28 a.m.5 views

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: fpga: fixed the potential null pointer dereferencing in fpgamgrtestimgloadsgt The fpgamgrtestimgloadsgt function allocates memory for sgt using kunitkzalloc. However, it does not check whether the allocation fails. It then...

5.5CVSS6AI score0.00159EPSS
SaveExploits0References3
Rows per page
Query Builder