EUVD-2022-38763

Malicious code in bioql PyPI...

EUVD-2023-43200

Malicious code in bioql PyPI...

EUVD-2023-43197

Malicious code in bioql PyPI...

EUVD-2023-41949

Malicious code in bioql PyPI...

EUVD-2023-41948

Malicious code in bioql PyPI...

EUVD-2023-43195

Malicious code in bioql PyPI...

EUVD-2023-55055

Malicious code in bioql PyPI...

EUVD-2023-55054

Malicious code in bioql PyPI...

EUVD-2022-38848

Malicious code in bioql PyPI...

EUVD-2023-55044

Malicious code in bioql PyPI...

EUVD-2023-41947

Malicious code in bioql PyPI...

EUVD-2023-43198

Malicious code in bioql PyPI...

LaSM: Layer-Wise Scaling Mechanism for Defending Pop-Up Attack on GUI Agents

Graphical user interface GUI agents built on multimodal large language models MLLMs have recently demonstrated strong decision-making abilities in screen-based interaction tasks. However, they remain highly vulnerable to pop-up-based environmental injection attacks, where malicious visual element...

EditLord: Learning Code Transformation Rules for Code Editing

Code editing is a foundational task in software development, where its effectiveness depends on whether it introduces desired code property changes without changing the original code's intended functionality. Existing approaches often formulate code editing as an implicit end-to-end task, omittin...

Graph Neural Networks for Jamming Source Localization

Graph-based learning provides a powerful framework for modeling complex relational structures; however, its application within the domain of wireless security remains significantly underexplored. In this work, we introduce the first application of graph-based learning for jamming source...

CVE-2022-35890

An issue was discovered in Inductive Automation Ignition before 7.9.20 and 8.x before 8.1.17. Designer and Vision Client Session IDs are mishandled. An attacker can determine which session IDs were generated in the past and then hijack sessions assigned to these IDs via Randy...

CVE-2022-36126

An issue was discovered in Inductive Automation Ignition before 7.9.20 and 8.x before 8.1.17. The ScriptInvoke function allows remote attackers to execute arbitrary code by supplying a Python script...

CVE-2022-35872

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 b2022030114. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

CVE-2022-35873

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 b2022030114. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

The vulnerability of the ModuleInvoke class in SCADA systems of Inductive Automation Ignition allows a perpetrator to execute arbitrary code.

The vulnerability of the ModuleInvoke class in the SCADA system of Inductive Automation Ignition involves the restoration of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code within the SYSTEM context...