13737 matches found
EUVD-2023-43098
Malicious code in bioql PyPI...
EUVD-2024-1230
Malicious code in bioql PyPI...
EUVD-2025-12780
Malicious code in bioql PyPI...
CryptOracle: A Modular Framework to Characterize Fully Homomorphic Encryption
Privacy-preserving machine learning has become an important long-term pursuit in this era of artificial intelligence AI. Fully Homomorphic Encryption FHE is a uniquely promising solution, offering provable privacy and security guarantees. Unfortunately, computational cost is impeding its mass...
A Novel Unified Lightweight Temporal-Spatial Transformer Approach for Intrusion Detection in Drone Networks
The growing integration of drones across commercial, industrial, and civilian domains has introduced significant cybersecurity challenges, particularly due to the susceptibility of drone networks to a wide range of cyberattacks. Existing intrusion detection mechanisms often lack the adaptability,...
LegalSim: Multi-Agent Simulation of Legal Systems for Discovering Procedural Exploits
We present LegalSim, a modular multi-agent simulation of adversarial legal proceedings that explores how AI systems can exploit procedural weaknesses in codified rules. Plaintiff and defendant agents choose from a constrained action space for example, discovery requests, motions, meet-and-confer,...
MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of MLflow Tracking Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of model file paths. The issue results from the lack of proper...
PentestMCP: A Toolkit for Agentic Penetration Testing
Agentic AI is transforming security by automating many tasks being performed manually. While initial agentic approaches employed a monolithic architecture, the Model-Context-Protocol has now enabled a remote-procedure call RPC paradigm to agentic applications, allowing for the flexible constructi...
PT-2025-40608
Name of the Vulnerable Software and Affected Versions MLflow Tracking Server affected versions not specified Description The MLflow Tracking Server contains a directory traversal flaw that allows remote attackers to execute arbitrary code on affected systems. Authentication is not required for...
Integer Overflow lead to DOS in API `v2/models/<model-name>/infer`
This report is not public...
PT-2025-40402
Name of the Vulnerable Software and Affected Versions Vasion Print formerly PrinterLogic Virtual Appliance Host and Application VA/SaaS deployments affected versions not specified Description The software stores a significant number of sensitive credentials, including database passwords, MySQL ro...
Evaluating the Robustness of a Production Malware Detection System to Transferable Adversarial Attacks
As deep learning models become widely deployed as components within larger production systems, their individual shortcomings can create system-level vulnerabilities with real-world impact. This paper studies how adversarial attacks targeting an ML component can degrade or bypass an entire...
Gemini AI flaws could have exposed your data
Security researchers discovered three vulnerabilities in Google's Gemini artificial intelligence AI assistant. Although now patched, this "Trifecta", as the researchers called it, raises important questions about how safe AI tools really are, especially as they become a part of services many of u...
Heap Buffer Overflow
executorch is vulnerable to Heap Buffer Overflow. The vulnerability is due to improper handling in the loading of ExecuTorch models, which allows an attacker to achieve code execution or cause other undesirable effects...
Integer Overflow
executorch is vulnerable to integer overflow. The vulnerability is due to improper handling in the loading of ExecuTorch models, which allows an attacker to place objects outside their allocated memory area leading to potential code execution or other undesirable effects...
Integer Overflow
executorch is vulnerable to integer overflow. The vulnerability is due to improper handling of model loading, which allows an attacker to trigger overlapping allocations leading to potential code execution or other undesirable effects...
CVE-2025-10538
An authentication bypass vulnerability exists in LG Innotek camera models LND7210 and LNV7210R. The vulnerability allows a malicious actor to gain access to camera information including user account information...
CVE-2025-10538
CVE-2025-10538 affects LG Innotek camera models LND7210 and LNV7210R. The root cause is an authentication bypass that lets an attacker access camera information, including user account details. Public disclosures across NVD, Red Hat, CNNVD, and CISA confirm the vulnerability, with CVSS v4 base sc...
CVE-2025-10538 Authentication Bypass in LG Innotek Camera
An authentication bypass vulnerability exists in LG Innotek camera models LND7210 and LNV7210R. The vulnerability allows a malicious actor to gain access to camera information including user account information...
