1043 matches found
EUVD-2021-9451
Malicious code in bioql PyPI...
EUVD-2021-9452
Malicious code in bioql PyPI...
EUVD-2025-31409
Malicious code in bioql PyPI...
EUVD-2021-8983
Malicious code in bioql PyPI...
EUVD-2025-2148
Malicious code in bioql PyPI...
EUVD-2022-46594
Malicious code in bioql PyPI...
EUVD-2023-2491
Malicious code in bioql PyPI...
EUVD-2022-46588
Malicious code in bioql PyPI...
EUVD-2024-1381
Malicious code in bioql PyPI...
EUVD-2023-12762
Malicious code in bioql PyPI...
EUVD-2018-1549
Malicious code in bioql PyPI...
EUVD-2022-7537
Malicious code in bioql PyPI...
PYSEC-2025-152
An Improper Handling of Exceptional Conditions vulnerability in the ZIP archive scanning component of mmaitre314 picklescan allows a remote attacker to bypass security scans. This is achieved by crafting a ZIP archive containing a file with a bad Cyclic Redundancy Check CRC, which causes the...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the formtodatabase exten. An attacker can execute arbitrary scripts in the context of the user's browser by injecting malicious input. Details Cross-site scripting or XSS is a code vulnerability that occurs...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the remote app title field. An attacker can execute arbitrary web scripts or inject malicious HTML by submitting crafted input to this field. Details Cross-site scripting or XSS is a code vulnerability that...
False Sense of Security: Why Probing-Based Malicious Input Detection Fails to Generalize
Large Language Models LLMs can comply with harmful instructions, raising serious safety concerns despite their impressive capabilities. Recent work has leveraged probing-based approaches to study the separability of malicious and benign inputs in LLMs' internal representations, and researchers ha...
Linux Distros Unpatched Vulnerability : CVE-2020-28604
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead ...
Linux Distros Unpatched Vulnerability : CVE-2022-43600
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple code execution vulnerabilities exist in the IFFOutput::close functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput...
Linux Distros Unpatched Vulnerability : CVE-2020-28612
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead ...
Regular Expression Denial Of Service (ReDoS)
Hugging Face Transformers is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability is due to the use of a regex pattern /^/^// in the converttfweightnametoptweightname function, which allows attackers to craft malicious input strings causing catastrophic backtracking and...