103 matches found
follina-CVE-2022-30190
follina-CVE-2022-30190 di hazard...
CVE-2026-74887
opensslencrypt before 1.4.0 imports Python's non-cryptographic 'random' module Mersenne Twister PRNG at line 15 of opensslencrypt/modules/pqc.py. No direct calls to random. were present in the code, so no cryptographic operation is currently affected; however, the import creates a hazard that...
EUVD-2026-60106
opensslencrypt before 1.4.0 imports Python's non-cryptographic 'random' module Mersenne Twister PRNG at line 15 of opensslencrypt/modules/pqc.py. No direct calls to random. were present in the code, so no cryptographic operation is currently affected; however, the import creates a hazard that...
CVE-2026-74887 openssl_encrypt before 1.4.0 Insecure Random Import in PQC Module
opensslencrypt before 1.4.0 imports Python's non-cryptographic 'random' module Mersenne Twister PRNG at line 15 of opensslencrypt/modules/pqc.py. No direct calls to random. were present in the code, so no cryptographic operation is currently affected; however, the import creates a hazard that...
CVE-2026-74887
openssl_encrypt before 1.4.0 imports Python's non-cryptographic random module (Mersenne Twister) in modules/pqc.py line 15. No current code calls random.*, so no crypto operation is actively affected, but the import creates a latent hazard: future code could accidentally use predictable PRNG outp...
Modeling Local Exploit Hazard - a Bayesian Framework for Quantifying Exploit Risk and Operational Efficiency
This paper presents a local exploit hazard model : a Bayesian framework that converts the global probabilities produced by an exploit likelihood model ELM, such as the Exploit Prediction Scoring System EPSS, into a daily exploit hazard rate for an organization's own assets. The model measures the...
PT-2026-62485
Name of the Vulnerable Software and Affected Versions Oracle TimesTen In-Memory Database version 26.1.1.1.0 Description A flaw in the Kubernetes Operator component allows a low-privileged attacker with network access via HTTPS to compromise the system. This can lead to an unauthorized hang or a...
kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()
A use-after-free flaw was found in the Linux kernel's iSCSI target subsystem. In the iscsitdecconnusagecount function, complete is called while still holding the conn-connusagelock spinlock. The waiting thread such as iscsitcloseconnection may wake up immediately and free the iscsitconn structure...
Malicious Package
Overview iv-bloomfilter is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Risk Models As Mediating Artifacts: A Postphenomenological Analysis of the CIIM Framework in Cybersecurity Practice
This article applies postphenomenological theory to the field of cybersecurity risk management, arguing that formal risk models function as mediating artifacts that shape how security practitioners or analysts perceive, interpret, and act on threats. Based on Don Ihde's taxonomy on human-technolo...
MiracleLinux 9 : iperf3-3.9-10.el9.ML.1 (AXSA:2023-6343:03)
The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2023-6343:03 advisory. iperf3: memory allocation hazard and crash CVE-2023-38403 Tenable has extracted the preceding description block directly from the MiracleLinux security...
MiracleLinux 8 : iperf3-3.5-7.el8.ML.1 (AXSA:2023-6327:02)
The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2023-6327:02 advisory. iperf3: memory allocation hazard and crash CVE-2023-38403 Tenable has extracted the preceding description block directly from the MiracleLinux security...
MiracleLinux 7 : iperf3-3.1.7-3.el7 (AXSA:2023-6275:01)
The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2023-6275:01 advisory. iperf3: memory allocation hazard and crash CVE-2023-38403 CVEs: CVE-2023-38403 Tenable has extracted the preceding description block directly from the...
Abusing the Internet of Medical Things: Evaluating Threat Models and Forensic Readiness for Multi-Vector Attacks on Connected Healthcare Devices
Individuals experiencing interpersonal violence IPV, who depend on medical devices, represent a uniquely vulnerable population as healthcare technologies become increasingly connected. Despite rapid growth in MedTech innovation and "health-at-home" ecosystems, the intersection of MedTech...
Malicious code in putri-rawon47-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1bf74145d1a4483f9335764e3185e6220826eee91e2109edb078d42e6e735d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in umi-soto86-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd3b28412d5cf7f2933a32d0b8f97329a3cbfcf681b39d90440795e0f71dbd5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2017-7563
Malware in sbrugna...
Seeing Is Deceiving: Mirror-Based LiDAR Spoofing for Autonomous Vehicle Deception
Autonomous vehicles AVs rely heavily on LiDAR sensors for accurate 3D perception. We show a novel class of low-cost, passive LiDAR spoofing attacks that exploit mirror-like surfaces to inject or remove objects from an AV's perception. Using planar mirrors to redirect LiDAR beams, these attacks...