475 matches found
PT-2025-52311
Name of the Vulnerable Software and Affected Versions Kentico Xperience affected versions not specified Description A stored cross-site scripting issue exists in Kentico Xperience. Global administrators can inject malicious payloads through the Localization application. Successful exploitation...
CVE-2025-64725
Weblate is a web based localization tool. In versions prior to 5.15, it was possible to accept an invitation opened by a different user. Version 5.15. contains a patch. As a workaround, avoid leaving one's Weblate sessions with an invitation opened unattended...
PT-2025-51350
Name of the Vulnerable Software and Affected Versions Weblate versions prior to 5.15 Description Weblate, a web-based localization tool, had a broken authorization issue in its REST API that allowed for systematic user and project enumeration. Specifically, it was possible to retrieve user...
PT-2025-51315
Name of the Vulnerable Software and Affected Versions Weblate versions prior to 5.15 Description Weblate is a web-based localization tool. Versions prior to 5.15 allowed accepting an invitation opened by a different user. Recommendations Update to version 5.15 or later. As a workaround, avoid...
COGNITION: From Evaluation to Defense against Multimodal LLM CAPTCHA Solvers
This paper studies how multimodal large language models MLLMs undermine the security guarantees of visual CAPTCHA. We identify the attack surface where an adversary can cheaply automate CAPTCHA solving using off-the-shelf models. We evaluate 7 leading commercial and open-source MLLMs across 18...
Mageia: Security Advisory (MGASA-2025-0305)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
VULPO: Context-Aware Vulnerability Detection Via On-Policy LLM Optimization
The widespread reliance on open-source software dramatically increases the risk of vulnerability exploitation, underscoring the need for effective and scalable vulnerability detection VD. Existing VD techniques, whether traditional machine learning-based or LLM-based approaches like prompt...
CVE-2025-64326
Weblate is a web based localization tool. In versions 5.14 and below, Weblate leaks the IP address of the project member inviting the user to the project in the audit log. The audit log includes IP addresses from admin-triggered actions, which can be viewed by invited users. This issue is fixed i...
Weblate 安全漏洞
Weblate is a Copyleft open source web-based free software continuous localization system. A security vulnerability exists in Weblate 5.14 and earlier versions, which stems from audit logs leaking project member IP addresses, potentially leading to information disclosure...
Machine and Deep Learning for Indoor UWB Jammer Localization
Ultra-wideband UWB localization delivers centimeter-scale accuracy but is vulnerable to jamming attacks, creating security risks for asset tracking and intrusion detection in smart buildings. Although machine learning ML and deep learning DL methods have improved tag localization, localizing...
MAL-2025-49162 Malicious code in epic-localization (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43b37ee6d2ce42329cf2715af7ae5f7ae981ab906822159fb51c94c78e81f4bd The package epic-localization was found to contain malicious code...
Malicious code in epic-localization (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43b37ee6d2ce42329cf2715af7ae5f7ae981ab906822159fb51c94c78e81f4bd The package epic-localization was found to contain malicious code...
EUVD-2025-37131
Malicious code in epic-localization npm...
MAL-2025-48989 Malicious code in bernie-plugin-l10n (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd6d3c0bbb9843d7995ddad49f2b4142829723406f19e006a25df0ff156e9451 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-36842
Malicious code in bernie-plugin-l10n npm...
Active Localization of Close-Range Adversarial Acoustic Sources for Underwater Data Center Surveillance
Underwater data infrastructures offer natural cooling and enhanced physical security compared to terrestrial facilities, but are susceptible to acoustic injection attacks that can disrupt data integrity and availability. This work presents a comprehensive surveillance framework for localizing and...
PromptLocate: Localizing Prompt Injection Attacks
Prompt injection attacks deceive a large language model into completing an attacker-specified task instead of its intended task by contaminating its input data with an injected prompt, which consists of injected instructions and data. Localizing the injected prompt within contaminated data is...
An AUTOSAR-Aligned Architectural Study of Vulnerabilities in Automotive SoC Software
Cooperative, Connected and Automated Mobility CCAM are complex cyber-physical systems CPS that integrate computation, communication, and control in safety-critical environments. At their core, System-on-Chip SoC platforms consolidate processing units, communication interfaces, AI accelerators, an...