714 matches found
CVE-2025-46295: Improper Control of Generation of Code
Apache Commons Text versions prior to 1.10.0 included interpolation features that could be abused when applications passed untrusted input into the text-substitution API. Because some interpolators could trigger actions like executing commands or accessing external resources, an attacker could...
Malicious code in buffered-interpolation-babylon6 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64ab29ae406a4f654e583c6b6939dafe3416ae75a8eab8dbc42556c6d8040e13 The package buffered-interpolation-babylon6 was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-199158
Malicious code in buffered-interpolation-babylon6 npm...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Federated Anomaly Detection and Mitigation for EV Charging Forecasting under Cyberattacks
Electric Vehicle EV charging infrastructure faces escalating cybersecurity threats that can severely compromise operational efficiency and grid stability. Existing forecasting techniques are limited by the lack of combined robust anomaly mitigation solutions and data privacy preservation...
EUVD-2022-54620
In the Linux kernel, the following vulnerability has been resolved: power: supply: core: Fix boundary conditions in interpolation The functions powersupplytemp2resistsimple and powersupplyocv2capsimple handle boundary conditions incorrectly. The change was introduced in...
EUVD-2018-0260
Malware in sbrugna...
EUVD-2013-4351
Malware in sbrugna...
EUVD-2016-1817
Malware in sbrugna...
EUVD-2021-1400
Malware in sbrugna...
EUVD-2022-2644
Malicious code in bioql PyPI...
org.webjars.npm:angular-translate-interpolation-messageformat (>=2.15.2, <=2.19.1) potentially affected by CVE-2025-57349 via org.webjars.npm:messageformat (1.0.2)
org.webjars.npm:messageformat MAVEN version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:messageformat and may be impacted: - org.webjars.npm:angular-translate-interpolation-messageformat =2.15.2, =2.19.1 Source cves:...
Linux Distros Unpatched Vulnerability : CVE-2022-33980
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Commons Configuration performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolatio...
Linux Distros Unpatched Vulnerability : CVE-2025-35036
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Hibernate Validator before 6.2.0 and 7.0.0, by default and depending how it is used, may interpolate user- supplied input in a constraint violation message with...
Latent Fusion Jailbreak: Blending Harmful and Harmless Representations to Elicit Unsafe LLM Outputs
Large language models LLMs demonstrate impressive capabilities in various language tasks but are susceptible to jailbreak attacks that circumvent their safety alignments. This paper introduces Latent Fusion Jailbreak LFJ, a representation-based attack that interpolates hidden states from harmful...
CVE-2025-35036
Hibernate Validator before 6.2.0 and 7.0.0, by default and depending how it is used, may interpolate user-supplied input in a constraint violation message with Expression Language. This could allow an attacker to access sensitive information or execute arbitrary Java code. Hibernate Validator as ...
UBUNTU-CVE-2025-35036
Hibernate Validator before 6.2.0 and 7.0.0, by default and depending how it is used, may interpolate user-supplied input in a constraint violation message with Expression Language. This could allow an attacker to access sensitive information or execute arbitrary Java code. Hibernate Validator as ...
CVE-2025-35036: Improper Control of Generation of Code
Hibernate Validator before 6.2.0 and 7.0.0, by default and depending how it is used, may interpolate user-supplied input in a constraint violation message with Expression Language. This could allow an attacker to access sensitive information or execute arbitrary Java code. Hibernate Validator as ...
CVE-2021-29529
TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a heap buffer overflow in tf.rawops.QuantizedResizeBilinear by manipulating input values so that float rounding results in off-by-one error in accessing image elements. This is because the...