13519 matches found
Interger Overflow
executorch is vulnerable to integer overflow. The vulnerability is due to improper handling of integer calculations during model loading, which allows an attacker to cause smaller-than-expected memory allocations leading to potential code execution or other unintended effects...
CVE-2025-56161
YOSHOP 2.0 allows unauthenticated information disclosure via comment-list API endpoints in the Goods module. The Comment model eagerly loads the related User model without field filtering; because User.php defines no $hidden or $visible attributes, sensitive fields bcrypt password hash, mobile...
CVE-2025-59447
The YoSmart YoLink Smart Hub device 0382 exposes a UART debug interface. An attacker with direct physical access can leverage this interface to read a boot log, which includes network access credentials...
ROS-20251006-11
A vulnerability in the permissions model of the Node.js software platform is related to flaws in the processing of HTTP requests. Exploitation of the vulnerability could allow a remote attacker to bypass existing security restrictions and send unauthorized requests. existing security restrictions...
Why Software Signing (Still) Matters: Trust Boundaries in the Software Supply Chain
Software signing provides a formal mechanism for provenance by ensuring artifact integrity and verifying producer identity. It also imposes tooling and operational costs to implement in practice. In an era of centralized registries such as PyPI, npm, Maven Central, and Hugging Face, it is...
CVE-2025-11303
Belkin F9K1015 (version 1.00.10) contains a command injection flaw in the /goform/mp handler via manipulation of the command argument. The vulnerability allows remote execution and is supported by multiple sources (NVD, Red Hat, Vulners enrichments, PT Security) with exploitation details publicly...
CVE-2025-11295 Belkin F9K1015 formPPPoESetup buffer overflow
A flaw has been found in Belkin F9K1015 1.00.10. This affects an unknown part of the file /goform/formPPPoESetup. This manipulation of the argument pppUserName causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used. The vendor was...
OptiFLIDS: Optimized Federated Learning for Energy-Efficient Intrusion Detection in IoT
In critical IoT environments, such as smart homes and industrial systems, effective Intrusion Detection Systems IDS are essential for ensuring security. However, developing robust IDS solutions remains a significant challenge. Traditional machine learning-based IDS models typically require large...
Real-VulLLM: An LLM Based Assessment Framework in the Wild
Artificial Intelligence AI and more specifically Large Language Models LLMs have demonstrated exceptional progress in multiple areas including software engineering, however, their capability for vulnerability detection in the wild scenario and its corresponding reasoning remains underexplored...
Agentic Misalignment: How LLMs Could Be Insider Threats
We stress-tested 16 leading models from multiple developers in hypothetical corporate environments to identify potentially risky agentic behaviors before they cause real harm. In the scenarios, we allowed models to autonomously send emails and access sensitive information. They were assigned only...
EUVD-2025-20218
Malicious code in bioql PyPI...
EUVD-2025-25794
Malicious code in bioql PyPI...
EUVD-2025-21558
Malicious code in bioql PyPI...
EUVD-2022-1503
Malicious code in bioql PyPI...
EUVD-2022-43566
Malicious code in bioql PyPI...
EUVD-2021-9879
Malicious code in bioql PyPI...
EUVD-2024-17343
Malicious code in bioql PyPI...
EUVD-2025-31224
Malicious code in bioql PyPI...