7606 matches found
Decryption Thorough Polynomial Ambiguity: Noise-Enhanced High-Memory Convolutional Codes for Post-Quantum Cryptography
We present a novel approach to post-quantum cryptography that employs directed-graph decryption of noise-enhanced high-memory convolutional codes. The proposed construction generates random-like generator matrices that effectively conceal algebraic structure and resist known structural attacks...
AI-Driven Cybersecurity Testbed for Nuclear Infrastructure: Comprehensive Evaluation Using METL Operational Data
Advanced nuclear reactor systems face increasing cybersecurity threats as sophisticated attackers exploit cyber-physical interfaces to manipulate control systems while evading traditional IT security measures. This research presents a comprehensive evaluation of artificial intelligence approaches...
SUSE CVE-2025-66382
In libexpat through 2.7.3, a crafted file with an approximate size of 2 MiB can lead to dozens of seconds of processing time...
Friday Squid Blogging: Flying Neon Squid Found on Israeli Beach
A meter-long flying neon squid Ommastrephes bartramii was found dead on an Israeli beach. The species is rare in the Mediterranean. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Blog moderation policy...
Directory Traversal
Overview keras is a Keras is a high-level neural networks API for Python.. Affected versions of this package are vulnerable to Directory Traversal via the keras.utils.getfile function when extracting tar archives. An attacker can write arbitrary files outside the intended extraction directory by...
Security update for cups
This update for cups fixes the following issues: CVE-2025-61915: Fixed local denial-of-service via cupsd.conf update bsc1253783 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the...
CVE-2025-66382
In libexpat through 2.7.3, a crafted file with an approximate size of 2 MiB can lead to dozens of seconds of processing time...
UBUNTU-CVE-2025-66382
In libexpat through 2.7.3, a crafted file with an approximate size of 2 MiB can lead to dozens of seconds of processing time...
CVE-2025-64076
A flaw was found in cbor2. This vulnerability allows denial of service through process crashes or memory exhaustion via sending specially-crafted CBOR data containing definite-length text strings with multi-byte UTF-8 characters...
libexpat 安全漏洞
libexpat is a streaming XML parser written in C by the libexpat team. A security vulnerability exists in libexpat 2.7.3 and earlier versions, which stems from specially crafted files that may result in excessive processing times...
JLSEC-2025-250 libarchive through 3.7.7 has a heap-based buffer over-read in `header_gnu_longlink` in...
libarchive through 3.7.7 has a heap-based buffer over-read in headergnulonglink in archivereadsupportformattar.c via a TAR archive because it mishandles truncation in the middle of a GNU long linkname...
Uncontrolled Recursion
Overview Affected versions of this package are vulnerable to Uncontrolled Recursion via the querystring processing. An attacker can exhaust system resources and disrupt service availability by submitting excessively long Boolean or disjunction queries. PoC GET search "query": "querystring":...
CVE-2025-12970
The extractname function in Fluent Bit indocker input plugin copies container names into a fixed size stack buffer without validating length. An attacker who can create containers or control container names, can supply a long name that overflows the buffer, leading to process crash or arbitrary...
[SECURITY] [DLA 4378-1] r-cran-gh security update
Debian LTS Advisory DLA-4378-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert November 25, 2025 https://wiki.debian.org/LTS Package : r-cran-gh Version : 1.2.0-1+deb11u1 CVE ID : CVE-2025-54956 Debian Bug : 1110481 A vulnerability has been discovered in r-cran-gh,...
Debian dla-4378 : r-cran-gh - security update
The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4378 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4378-1 [email protected] https://www.debian.org/lts/security/...
Debian dla-4382 : libsdl2-2.0-0 - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4382 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4382-1 [email protected] https://www.debian.org/lts/security/...
Debian dla-4380 : cups-browsed - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4380 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4380-1 [email protected]...
AZL-71111 CVE-2025-12970 affecting package fluent-bit for versions less than 3.1.10-2
The extractname function in Fluent Bit indocker input plugin copies container names into a fixed size stack buffer without validating length. An attacker who can create containers or control container names, can supply a long name that overflows the buffer, leading to process crash or arbitrary...
Think Fast: Real-Time IoT Intrusion Reasoning Using IDS and LLMs at the Edge Gateway
As the number of connected IoT devices continues to grow, securing these systems against cyber threats remains a major challenge, especially in environments with limited computational and energy resources. This paper presents an edge-centric Intrusion Detection System IDS framework that integrate...
Deepfake Geography: Detecting AI-Generated Satellite Images
The rapid advancement of generative models such as StyleGAN2 and Stable Diffusion poses a growing threat to the authenticity of satellite imagery, which is increasingly vital for reliable analysis and decision-making across scientific and security domains. While deepfake detection has been...