EUVD-2026-46038

Chamilo LMS versions 1.11.38 and earlier contain a stored cross-site scripting vulnerability in the user registration form that allows any unauthenticated attacker to execute arbitrary JavaScript in an administrator's browser session, leading to full platform admin account takeover. This has been...

CVE-2026-39385

Frappe LMS is an open source learning management system. In version 2.51.0 and earlier, a user could bypass payment validation for courses by using unrelated batch. This has been patched in 2.52.0 with enrollment now validating that the batch is linked to course...

CVE-2026-39385

CVE-2026-39385 — Frappe LMS : Open-source LMS with a vulnerability in versions ≤ 2.51.0 where a user could bypass course payment validation by using an unrelated batch. Root cause: enrollment validation did not require the batch to be linked to the corresponding course. Impact: potential unauthor...

EUVD-2026-46029

Frappe LMS is an open source learning management system. In version 2.51.0 and earlier, a user could bypass payment validation for courses by using unrelated batch. This has been patched in 2.52.0 with enrollment now validating that the batch is linked to course...

CVE-2026-39385 Frappe LMS enrollment bypass in paid courses via unrelated batch

Frappe LMS is an open source learning management system. In version 2.51.0 and earlier, a user could bypass payment validation for courses by using unrelated batch. This has been patched in 2.52.0 with enrollment now validating that the batch is linked to course...

Malicious code in @azure-lab-services/ml-ts (npm)

--- -= Per source details. Do not edit below this line.=-...

RRAM-DP: Device-Calibrated Differential Privacy for In-Memory Edge Learning

Edge Artificial Intelligence of Things AIoT systems often collect sensitive data in situ, raising serious privacy concerns. Resistive-switching random-access memory RRAM is an attractive substrate for efficient AIoT thanks to its multi-bit storage and compute-in-memory CiM capabilities, while its...

(A)ISpy: Parasitic Trojans for Machine Learning Infrastructure

Modern machine learning ML pipelines depend heavily on third party libraries for graph compilation and hardware acceleration. While current practices audit data and model artifacts or rely on file integrity checks, the execution environment remains implicitly trusted. This blind spot enables acti...

Federated Lightweight Intrusion Detection in Drone Swarms with Knowledge Distillation

Drone swarms are increasingly deployed in critical applications such as surveillance, disaster response, and infrastructure monitoring. However, their reliance on open communication channels and their limited computational resources make them vulnerable to a wide range of cyber-threats. There is ...

Federated Learning and LLM-Driven Threat Intelligence for Zero Trust IoT Architecture

While the Internet of Things IoT has become essential, they introduced serious security and privacy challenges, especially for mission-critical environments. Legacy devices are vulnerable to viruses, data breaches, and unauthorized access, and updating these devices would be infeasibly costly. As...

Enhanced Multi-Class DDoS Attack Identification Using a Meta-Learning Ensemble

Distributed Denial of Service DDoS attacks continue to pose significant threats to network availability and security. While many detection systems focus on binary classification attack vs. benign, effective mitigation often requires identifying the specific type of DDoS attack. This paper...

Revisiting Data-Driven Dynamic Security Assessment with a Tabular Foundation Model

Data-driven pre-fault dynamic security assessment DSA rapidly evaluates the dynamic risk of credible contingencies on a power system using machine learning. Existing approaches face two limitations. First, they require a large labelled database for training, with a separate model trained, tuned,...

Exploit for CVE-2022-25476

CVE-2022-25476 ⚡ Simple Usage Use this project only in s...

deep-learning-plus (>=0.0.5, <=0.0.7), torchfl (>=0.1.1, <=0.1.5) potentially affected by CVE-2026-58659 via pytorch-lightning (1.5.7)

pytorch-lightning PYPI version 1.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - deep-learning-plus =0.0.5, =0.1.1, =0.1.5 Source cves: CVE-2026-58659 Source advisory: OSV:PYSEC-2026-3967...

chatmof (>=0.2.0, <=0.2.2), finetuning-scheduler (0.2.0) +2 more potentially affected by CVE-2026-58659 via pytorch-lightning (1.7.0)

pytorch-lightning PYPI version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - chatmof =0.2.0, =1.1.2, =0.3.7, =0.3.11 Source cves: CVE-2026-58659 Source advisory: OSV:PYSEC-2026-3967...

classy-core (>=0.2.1.dev20220303, <=0.2.1), open-metric-learning (>=0.3.0, <=0.3.6) potentially affected by CVE-2026-58659 via pytorch-lightning (1.5.9)

pytorch-lightning PYPI version 1.5.9 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - classy-core =0.2.1.dev20220303, =0.3.0, =0.3.6 Source cves: CVE-2026-58659 Source advisory: OSV:PYSEC-2026-3967...

Towards Quantum Machine Learning for Assessing the Resilience of Post-Quantum Cryptography

The potential capabilities of quantum computers motivated the development of cryptographic protocols suitable for securing communication against adversaries with access to large fault-tolerant quantum computers. However, even though current quantum computers are limited in terms of size and...

JLSEC-2026-748 The ML-KEM ARM64 NEON ciphertext comparison only compares half of the input, breaking the...

The ML-KEM ARM64 NEON ciphertext comparison only compares half of the input, breaking the Fujisaki-Okamoto transform's implicit rejection and weakening IND-CCA2 security on that code path. The constant-time comparison effectively ignored part of the re-encrypted ciphertext, so a decapsulating par...

EUVD-2026-43551

The SCORM lab launch endpoint in Skillable scorm.skillable.com through 2026-07-13 does not validate the client-supplied userId parameter against the authenticated SCORM session token. An authenticated user can substitute arbitrary userId values to bypass per-user lab launch rate limits and consum...

AI in Cyberpsychology: A Systematic Literature Review of Cybersecurity Enhancement by Using AI for Analyzing Psychology of Victims, Attackers, and Defenders

Cybersecurity is the practice of protecting systems, networks, and data from digital attacks. Cyberpsychology CPSY is defined as the use of psychology to enhance cybersecurity applications. Since the early 2010s, the evolution of Artificial Intelligence AI has increasingly integrated with CPSY,...