EUVD-2025-19175

Malicious code in bioql PyPI...

EUVD-2021-32406

Malicious code in bioql PyPI...

EUVD-2024-24396

Malicious code in bioql PyPI...

EUVD-2022-32133

Malicious code in bioql PyPI...

EUVD-2023-48671

Malicious code in bioql PyPI...

EUVD-2025-19048

Malicious code in bioql PyPI...

EUVD-2022-28667

Malicious code in bioql PyPI...

EUVD-2022-39027

Malicious code in bioql PyPI...

EUVD-2021-29007

Malicious code in bioql PyPI...

EUVD-2024-49193

Malicious code in bioql PyPI...

EUVD-2022-30408

Malicious code in bioql PyPI...

text-generation-inference: Unbounded external image fetch in validation leads to resource-exhaustion DoS

Description Text Generation Inference Router DoS via pre-validation image fetch in VLM mode. Affected: Router workspace version 3.3.6 the latest repo, when deployed with a vision/VLM model e.g., Idefics/Mllama/Idefics2/Idefics3/Gemma3/Llama4/Paligemma/LlavaNext/Qwen2VL/Qwen25VL. Pure text LLMs do...

CVE-2025-10538

An authentication bypass vulnerability exists in LG Innotek camera models LND7210 and LNV7210R. The vulnerability allows a malicious actor to gain access to camera information including user account information...

Integer Overflow lead to DOS in API `v2/models/<model-name>/infer`

This report is not public...

Authentication Security of PRF GNSS Ranging

This work derives the authentication security of pseudorandom function PRF GNSS ranging under multiple GNSS spoofing models, including the Security Code Estimation and Replay SCER spoofer. When GNSS ranging codes derive from a PRF utilizing a secret known only to the broadcaster, the spoofer cann...

MALF: A Multi-Agent LLM Framework for Intelligent Fuzzing of Industrial Control Protocols

Industrial control systems ICS are vital to modern infrastructure but increasingly vulnerable to cybersecurity threats, particularly through weaknesses in their communication protocols. This paper presents MALF Multi-Agent LLM Fuzzing Framework, an advanced fuzzing solution that integrates large...

FalseCrashReducer: Mitigating False Positive Crashes in OSS-Fuzz-Gen Using Agentic AI

Fuzz testing has become a cornerstone technique for identifying software bugs and security vulnerabilities, with broad adoption in both industry and open-source communities. Directly fuzzing a function requires fuzz drivers, which translate random fuzzer inputs into valid arguments for the target...

Backdoor Attacks against Speech Language Models

Large Language Models LLMs and their multimodal extensions are becoming increasingly popular. One common approach to enable multimodality is to cascade domain-specific encoders with an LLM, making the resulting model inherit vulnerabilities from all of its components. In this work, we present the...

PT-2025-40062

Name of the Vulnerable Software and Affected Versions LG Innotek camera models LND7210 and LNV7210R Description An authentication bypass flaw exists in LG Innotek camera models LND7210 and LNV7210R. This allows a malicious actor to gain access to camera information, including user account...

CHAI: Command Hijacking against Embodied AI

Embodied Artificial Intelligence AI promises to handle edge cases in robotic vehicle systems where data is scarce by using common-sense reasoning grounded in perception and action to generalize beyond training distributions and adapt to novel real-world situations. These capabilities, however, al...