EUVD-2025-53780

Malicious code in individual-moccasin-crow npm...

EUVD-2022-28114

Malicious code in bioql PyPI...

MAL-2025-44697 Malicious code in individual-correct-manner (npm)

The package individual-correct-manner was found to contain malicious code...

CVE-2024-32832

The CVE-2024-32832 entry corresponds to a Broken Access Control vulnerability in the WordPress plugin Login with phone number (versions

CVE-2023-3867

CVE-2023-3867 affects the Linux kernel ksmbd subsystem. It fixes an out-of-bounds read in smb2_sess_setup when a SMB2 compound request contains a second payload; processing the first payload could trigger an OOB read. The vulnerability could impact confidentiality and availability if exploited lo...

CVE-2023-3866

CVE-2023-3866 – ksmbd in the Linux kernel : The vulnerability arises from improper validation of the SMB session ID and tree ID in a compound request. If the first operation is an SMB2 ECHO, ksmbd may bypass session and tree validation, allowing work->sess and work->tcon to be NULL. A subse...

CVE-2023-32246

CVE-2023-32246 refers to a race in ksmbd where rcu_barrier() is not invoked during module unload, potentially allowing unloading with pending RCU callbacks and unintended kernel code execution. Multiple sources indicate the vulnerability has been resolved in the Linux kernel; no exploitation deta...

CVE-2024-32640

CVE-2024-32640 : Masa/Mura CMS is vulnerable to a SQL Injection in the JSON API path /index.cfm/_api/json/v1/default/?method=processAsyncObject. The issue arises in the processAsyncObject method and can lead to remote code execution. Affected versions: prior to 7.4.5, 7.3.12, and 7.2.7. Remediati...

编号撤回

ring is a library by Brian Smith, an individual developer. This CVE number has been withdrawn...

pybbs 安全漏洞

pybbs is a community platform for Java development by iuiu individual developers. A security vulnerability exists in pybbs 6.0.0 and earlier versions, which stems from a guessable CAPTCHA issue in the function adminlogin/login in the CAPTCHA handling component...

CVE-2023-32253

CVE-2023-32253 affects the Linux kernel’s ksmbd subsystem. A deadlock is triggered by sending multiple concurrent session setup requests, which can lead to a denial of service. Provided sources consistently describe the issue in the ksmbd component and its DO S impact; no explicit exploit details...

CVE-2023-32256

The CVE-2023-32256 entry describes a race condition in the Linux kernel ksmbd component where a race between smb2 close and logoff on multichannel connections can cause a use-after-free. This affects the Linux kernel ksmbd implementation; the vulnerability details include the potential for a secu...

Prompt Optimization and Evaluation for LLM Automated Red Teaming

Applications that use Large Language Models LLMs are becoming widespread, making the identification of system vulnerabilities increasingly important. Automated Red Teaming accelerates this effort by using an LLM to generate and execute attacks against target systems. Attack generators are evaluat...

A Bayesian Incentive Mechanism for Poison-Resilient Federated Learning

Federated learning FL enables collaborative model training across decentralized clients while preserving data privacy. However, its open-participation nature exposes it to data-poisoning attacks, in which malicious actors submit corrupted model updates to degrade the global model. Existing defens...

编号撤回

ring is a library by Brian Smith, an individual developer. This CVE number has been withdrawn...

CVE-2014-6274

git-annex vulnerability CVE-2014-6274: when using S3/Glacier remotes with embedcreds=yes and encryption=pubkey or encryption=hybrid, AWS credentials were stored in the repository in plaintext rather than encrypted. Affected range: 3.20121126 through 5.20140919. Impact: anyone with a copy of the r...

CVE-2014-7210

CVE-2014-7210 concerns PowerDNS (pdns) in Debian prior to 3.3.1-1. The issue is that the mysqldb backend’s maintainer scripts grant overly broad permissions to the pdns user, yielding a too-privileged MySQL user. Other backends are not affected. Connected sources confirm the Debian advisory conte...

CVE-2014-0468

CVE-2014-0468 affects FusionForge prior to 5.3+20140506, due to a misconfigured Apache setup that allows the web server to execute scripts uploaded by users in raw SCM repositories (SVN, Git, Bzr...). This mode C summary uses concrete details from connected sources: affected product/component (Fu...

CVE-2021-41691

CVE-2021-41691 affects the OS4Ed Open Source Information System Community (openSIS) v8.0. The vulnerability is a SQL injection in the POST endpoint "/TransferredOutModal.php" triggered by the parameters student_id and TRANSFER[SCHOOL] (notably in the path and parameter naming variants such as TRA...

CVE-2024-4994

CVE-2024-4994 describes a CSRF vulnerability in GitLab CE/EE affecting multiple release lines: 16.1.0–16.11.4, 17.0.x before 17.0.3, and 17.1.x before 17.1.1. The issue allows execution of arbitrary GraphQL mutations via CSRF on GitLabs GraphQL API. Mitigation is to upgrade to the fixed versions...