1259 matches found
CVE-2022-23637
K-Box is a web-based application to manage documents, images, videos and geodata. Prior to version 0.33.1, a stored Cross-Site-Scripting XSS vulnerability is present in the markdown editor used by the document abstract and markdown file preview. A specifically crafted anchor link can, if clicked,...
CVE-2021-37596
Telegram Web K Alpha 0.6.1 allows XSS via a document name...
CVE-2020-29157
An issue in RAONWIZ K Editor v2018.0.0.10 allows attackers to perform a DLL hijacking attack when the service or system is restarted...
CVE-2019-10741
K-9 Mail v5.600 can include the original quoted HTML code of a specially crafted, benign looking, email within digitally signed reply messages. The quoted part can contain conditional statements that show completely different text if opened in a different email client. This can be abused by an...
CVE-2018-17932
JUUKO K-800 Firmware versions prior to numbers ending ...9A, ...9B, ...9C, etc. is vulnerable to a replay attack and command forgery, which could allow attackers to replay commands, control the device, view commands, or cause the device to stop running...
CVE-1999-0735
KDE K-Mail allows local users to gain privileges via a symlink attack in temporary user directories...
Prink: $K_s$-Anonymization for Streaming Data in Apache Flink
In this paper, we present Prink, a novel and practically applicable concept and fully implemented prototype for ks-anonymizing data streams in real-world application architectures. Building upon the pre-existing, yet rudimentary CASTLE scheme, Prink for the first time introduces semantics-aware...
Optimizing DDoS Detection in SDNs through Machine Learning Models
The emergence of Software-Defined Networking SDN has changed the network structure by separating the control plane from the data plane. However, this innovation has also increased susceptibility to DDoS attacks. Existing detection techniques are often ineffective due to data imbalance and accurac...
Fair Play for Individuals, Foul Play for Groups? Auditing Anonymization'S Impact on ML Fairness
Machine learning ML algorithms are heavily based on the availability of training data, which, depending on the domain, often includes sensitive information about data providers. This raises critical privacy concerns. Anonymization techniques have emerged as a practical solution to address these...
SKALD: Scalable K-Anonymisation for Large Datasets
Data privacy and anonymisation are critical concerns in today's data-driven society, particularly when handling personal and sensitive user data. Regulatory frameworks worldwide recommend privacy-preserving protocols such as k-anonymisation to de-identify releases of tabular data. Available...
The Planted Orthogonal Vectors Problem
In the $k$-Orthogonal Vectors $k$-OV problem we are given $k$ sets, each containing $n$ binary vectors of dimension $d=n^o1$, and our goal is to pick one vector from each set so that at each coordinate at least one vector has a zero. It is a central problem in fine-grained complexity, conjectured...
Mitigating the Structural Bias in Graph Adversarial Defenses
In recent years, graph neural networks GNNs have shown great potential in addressing various graph structure-related downstream tasks. However, recent studies have found that current GNNs are susceptible to malicious adversarial attacks. Given the inevitable presence of adversarial attacks in the...
DP-SMOTE: Integrating Differential Privacy and Oversampling Technique to Preserve Privacy in Smart Homes
Smart homes represent intelligent environments where interconnected devices gather information, enhancing users living experiences by ensuring comfort, safety, and efficient energy management. To enhance the quality of life, companies in the smart device industry collect user data, including...
CVE-2025-46467
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rahendra Putra K™ RAphicon raphicon allows DOM-Based XSS.This issue affects RAphicon: from n/a through = 2.1.2...
CVE-2025-46467
The CVE-2025-46467 entry covers the WordPress RAphicon plugin (Rahendra Putra K) with a DOM-based XSS vulnerability due to improper input neutralization during web page generation. Affected versions are n/a through 2.1.2. The connected sources confirm the existence of a Cross-Site Scripting issue...
PT-2025-17783 · Rahendra Putra K · Raphicon
Name of the Vulnerable Software and Affected Versions: Rahendra Putra K RAphicon versions n/a through 2.1.2 Description: The issue affects Rahendra Putra K RAphicon, allowing DOM-Based XSS due to improper neutralization of input during web page generation. This enables Cross-site Scripting attack...
Scalable APT Malware Classification Via Parallel Feature Extraction and GPU-Accelerated Learning
This paper presents an underlying framework for both automating and accelerating malware classification, more specifically, mapping malicious executables to known Advanced Persistent Threat APT groups. The main feature of this analysis is the assembly-level instructions present in executables whi...
k-sasaking.net Cross Site Scripting vulnerability OBB-4047638
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Multi-Class Item Mining under Local Differential Privacy
Item mining, a fundamental task for collecting statistical data from users, has raised increasing privacy concerns. To address these concerns, local differential privacy LDP was proposed as a privacy-preserving technique. Existing LDP item mining mechanisms primarily concentrate on global...
Ubuntu: Security Advisory (USN-7414-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...