894 matches found
Redis: Redis: Authenticated users can execute LUA scripts as a different user
A code injection vulnerability in Redis Lua scripting where an authenticated user can craft a Lua script to manipulate objects and potentially execute code in another user’s context...
curl: curl’s persistence files inherit world-readable/writable perms from umask, leaking and tampering with cookies/HSTS/Alt-Svc caches
Executive Summary Curlfopen clones the permissions of any pre-existing persistence file when creating its temporary file. When the persistence file does not exist, it first creates one with the process umask typically 022, i.e., 0644. That mode is then copied to the temp file via 0600 | sb.stmode...
llama-index has Insecure Temporary File
The llamaindex library version 0.12.33 sets the NLTK data directory to a subdirectory of the codebase by default, which is world-writable in multi-user environments. This configuration allows local users to overwrite, delete, or corrupt NLTK data files, leading to potential denial of service, dat...
GHSA-RG9H-VX28-XXP5 llama-index has Insecure Temporary File
The llamaindex library version 0.12.33 sets the NLTK data directory to a subdirectory of the codebase by default, which is world-writable in multi-user environments. This configuration allows local users to overwrite, delete, or corrupt NLTK data files, leading to potential denial of service, dat...
EUVD-2007-2625
Malware in sbrugna...
EUVD-2020-16575
Malware in sbrugna...
EUVD-2017-11786
Malware in sbrugna...
EUVD-2021-24159
Malware in sbrugna...
EUVD-2021-14589
Malware in sbrugna...
EUVD-2009-3351
Malware in sbrugna...
Pilot Contamination Attacks Detection with Machine Learning for Multi-User Massive MIMO
Massive multiple-input multiple-output MMIMO is essential to modern wireless communication systems, like 5G and 6G, but it is vulnerable to active eavesdropping attacks. One type of such attack is the pilot contamination attack PCA, where a malicious user copies pilot signals from an authentic us...
EUVD-2023-53247
Malicious code in bioql PyPI...
EUVD-2024-31704
Malicious code in bioql PyPI...
EUVD-2023-32624
Malicious code in bioql PyPI...
EUVD-2022-29592
Malicious code in bioql PyPI...
EUVD-2021-28206
Malicious code in bioql PyPI...
EUVD-2023-44730
Malicious code in bioql PyPI...
EUVD-2024-34963
Malicious code in bioql PyPI...