281 matches found
Performance of Machine Learning Classifiers for Anomaly Detection in Cyber Security Applications
This work empirically evaluates machine learning models on two imbalanced public datasets KDDCUP99 and Credit Card Fraud 2013. The method includes data preparation, model training, and evaluation, using an 80/20 train/test split. Models tested include eXtreme Gradient Boosting XGB, Multi Layer...
Malicious code in arcus-gradient-colors (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1736 Malicious code in arcus-gradient-colors (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1735 Malicious code in arcus-gradient (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in arcus-gradient (npm)
--- -= Per source details. Do not edit below this line.=-...
GHSA-486G-47CC-8WXF aiocpa contains credential harvesting code
aiocpa is a user-facing library for generating color gradients of text. Version 0.1.13 introduced obfuscated, malicious code targeting Crypto Pay users, forwarding client credentials to a remote Telegram bot. All versions have been removed from PyPI...
Astra Linux – Vulnerability in LibreOffice
LibreOffice can import EMF+ graphics, which may be embedded in documents. A heap buffer overflow occurred when importing an EMF+ gradient brush. The number of gradient blend points was read from the file and used to compute an allocation size; however, this multiplication could lead to a buffer...
Microsoft LightGBM 安全漏洞
Microsoft LightGBM is a gradient boosting framework using a tree-based learning algorithm from Microsoft USA. A remote code execution vulnerability exists in Microsoft LightGBM. An attacker could exploit this vulnerability to execute arbitrary code on a system...
Malicious code in better-gradient (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 61ee3d2a1011f83d233eed4719b397bc9a4e69c449841335b187b323d9f980fc --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: duvet-love-odyssey Reasons based on the campaign: - infosteal...
MAL-2024-9949 Malicious code in better-gradient (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 61ee3d2a1011f83d233eed4719b397bc9a4e69c449841335b187b323d9f980fc --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: duvet-love-odyssey Reasons based on the campaign: - infosteal...
WordPress Happy Addons for Elementor plugin <= 3.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gradient Heading Widget vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Gradient Heading Widget vulnerability discovered by wesley wcraft in WordPress Plugin Happy Addons for Elementor versions = 3.11.1...
TensorFlow has Floating Point Exception in AvgPoolGrad with XLA
...
CVE-2024-5790
The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ attribute within the plugin's Gradient Heading widget in all versions up to, and including, 3.11.1 due to insufficient input sanitization and output escaping. This makes it possible for...
CVE-2024-5790 Happy Addons for Elementor <= 3.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gradient Heading Widget
The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ attribute within the plugin's Gradient Heading widget in all versions up to, and including, 3.11.1 due to insufficient input sanitization and output escaping. This makes it possible for...
PT-2024-37156 · WordPress · Happy Addons For Elementor
Name of the Vulnerable Software and Affected Versions: Happy Addons for Elementor plugin for WordPress versions up to, and including, 3.11.1 Description: The issue is related to Stored Cross-Site Scripting via the url attribute within the plugin's Gradient Heading widget due to insufficient input...
Malicious code in gradient-tiny (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 072e069157bae3a21204a965538030cd1d107c5a79c9574cc9b663c06225b36a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1673 Malicious code in gradient-tiny (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 072e069157bae3a21204a965538030cd1d107c5a79c9574cc9b663c06225b36a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-5327
The PowerPack Addons for Elementor Free Widgets, Extensions and Templates plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the ‘ppanimatedgradientbgcolor’ parameter in all versions up to, and including, 2.7.19 due to insufficient input sanitization and output...
CVE-2024-5327
The PowerPack Addons for Elementor Free Widgets, Extensions and Templates plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the ‘ppanimatedgradientbgcolor’ parameter in all versions up to, and including, 2.7.19 due to insufficient input sanitization and output...
CVE-2024-31346 WordPress Gradient Text Widget for Elementor plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Blocksmarket Gradient Text Widget for Elementor allows Stored XSS.This issue affects Gradient Text Widget for Elementor: from n/a through 1.0.1...