Decomposing Memorization Reduction in Privacy-Preserving Fine-Tuning of SLMs for CSIRTs

CSIRTs increasingly fine tune language models on vulnerability scan records, but these records expose internal network topology and create privacy risks under regulations such as GDPR and LGPD. We present the first empirical study of how DP SGD and HMAC pseudonymization interact when fine tuning...

PT-2026-43238

Name of the Vulnerable Software and Affected Versions Security Gateway affected versions not specified Description An input-handling issue exists in the UserChoice flow of the UserCheck Web Portal when DLP is active. An attacker with access to the UserCheck Ask page can manipulate stored...

CVE-2026-4415

creationtimestamp| type| source ---|---|--- 2026-03-30 07:21:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10804-689cd-2.html 2026-03-30 08:18:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mib7z567dw2t 2026-03-30 09:00:30+00:00| seen|...

PT-2025-46578

Name of the Vulnerable Software and Affected Versions affected versions not specified Description The vulnerability involves an unspecified issue. There is no information about the number of potentially affected devices or any real-world incidents where this issue was exploited. Recommendations A...

EUVD-2024-49962

Malicious code in bioql PyPI...

CVE-2011-0980

creationtimestamp| type| source ---|---|--- 2025-08-31 03:01:17+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d 2025-08-31 03:12:52+00:00| seen| MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57...

PT-2025-6184 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The reason for the rejection of the issue is mentioned, but no further details are provided about the issue itself. No information is available...

PT-2025-5887 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to a spoofing vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or details abou...

PT-2025-3018 · Unknown · Ability Module

Name of the Vulnerable Software and Affected Versions: Ability module affected versions not specified Description: The issue is related to a startup control vulnerability in the ability module. Successful exploitation of this vulnerability may cause features to perform abnormally. There is no...

PT-2025-1983 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A vulnerability has been identified, but details are not provided in the given input. No information is available about the estimated number of potentially affected devices or real-worl...

CVE-2024-9470

A vulnerability in Cortex XSOAR allows the disclosure of incident data to users who do not have the privilege to view the data...

CVE-2024-9470 Cortex XSOAR: Information Disclosure Vulnerability

A vulnerability in Cortex XSOAR allows the disclosure of incident data to users who do not have the privilege to view the data...

CVE-2024-9470

CVE-2024-9470 : Cortex XSOAR (Palo Alto Networks) has an information disclosure vulnerability that allows incident data to be seen by users lacking view privileges. The available documents describe the affected product and the impact (data leakage to unauthorized users) but do not provide exploit...

Cortex XSOAR: Information Disclosure Vulnerability

A vulnerability in Cortex XSOAR allows the disclosure of incident data to users who do not have the privilege to view the data. Work around: No work around available...

PT-2024-39652

Name of the Vulnerable Software and Affected Versions Cortex XSOAR affected versions not specified Description A vulnerability in Cortex XSOAR allows the disclosure of incident data to users who do not have the privilege to view the data. Recommendations At the moment, there is no information abo...

CVE-2024-9470: Exposure of Sensitive System Information to an Unauthorized Control Sphere

A vulnerability in Cortex XSOAR allows the disclosure of incident data to users who do not have the privilege to view the data...

PT-2024-21697 · Toshiba · Toshiba Printers

Name of the Vulnerable Software and Affected Versions: Toshiba printers affected versions not specified Description: The issue concerns hardcoded credentials in Toshiba printers. There is no information provided about the estimated number of potentially affected devices worldwide or details about...

PT-2024-25889 · Coderevolution · Coderevolution Aiomatic

Name of the Vulnerable Software and Affected Versions: CodeRevolution Aiomatic versions 1.9.3 and earlier Description: A Missing Authorization issue affects the software, allowing unauthorized access. The estimated number of potentially affected devices is not specified. There is no information...

CVE-2024-1674

creationtimestamp| type| source ---|---|--- 2024-02-21 05:26:50+00:00| seen| https://t.me/ctinow/189212 2024-02-22 03:52:35+00:00| seen| https://t.me/arpsyndicate/3904 2024-02-23 22:46:28+00:00| seen| https://t.me/ctinow/192250 2024-03-08 21:31:50+00:00| seen| https://t.me/ctinow/203595...

PT-2024-14286 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is mentioned on Twitter, but details are scarce. A link is provided, but it does not offer additional information about the issue...