EUVD-2024-0290

Malicious code in bioql PyPI...

EUVD-2025-12406

Malicious code in bioql PyPI...

EUVD-2024-25264

Malicious code in bioql PyPI...

Claude Code injection vulnerability

Claude Code is an open source proxy coding tool from Anthropic. A code injection vulnerability exists in Claude Code versions prior to 1.0.111, which stems from a flaw in the implementation of the startup trust dialog box that could lead to a code injection attack...

Cursor information leakage vulnerability

Cursor is an AI code editor open-sourced by Cursor. An information disclosure vulnerability exists in Cursor 1.6 and earlier versions, which stems from Mermaid allowing embedded images, which could lead to the disclosure of sensitive information...

Cursor security vulnerabilities

Cursor is an AI code editor from Cursor Open Source. A security vulnerability exists in Cursor 1.7 and earlier versions that stems from inadequate protection of sensitive files and could lead to remote code execution...

Claude Code security vulnerabilities

Claude Code is an open source proxy coding tool from Anthropic. A security vulnerability exists in Claude Code versions prior to 1.0.120 that stems from a failure to consider symbolic links when checking permission denial rules, which could lead to bypassing file access restrictions...

PT-2025-40797

CVE-2025-61671 - Rejected reason: Further research determined the i CVE ID : CVE-2025-61671 Published : Oct. 3, 2025, 7:15 a.m. | 4 hours, 12 minutes ago Description : Rejected reason: Further research determined the issue is not an open source vulnerability. Severity: 0.0 | NA Visit the link for...

pentest-automation-suite

Penetration Testing Automation Tools 🔴 Automated Penetratio...

Daniel Miessler on the AI Attack/Defense Balance

His conclusion: Context wins Basically whoever can see the most about the target, and can hold that picture in their mind the best, will be best at finding the vulnerabilities the fastest and taking advantage of them. Or, as the defender, applying patches or mitigations the fastest. And if you’re...

FalseCrashReducer: Mitigating False Positive Crashes in OSS-Fuzz-Gen Using Agentic AI

Fuzz testing has become a cornerstone technique for identifying software bugs and security vulnerabilities, with broad adoption in both industry and open-source communities. Directly fuzzing a function requires fuzz drivers, which translate random fuzzer inputs into valid arguments for the target...

PT-2025-40425

Name of the Vulnerable Software and Affected Versions WeGIA versions 3.4.12 and below Description WeGIA, a web manager designed for charitable institutions, is susceptible to a Cross-Site Request Forgery CSRF issue. The deletion function for the Almoxarifado entity is accessible through an HTTP G...

Creativeitem Ekushey CRM Cross-site Scripting Vulnerability

Creativeitem Ekushey CRM is an open source project management script by Creativeitem. A cross-site scripting vulnerability exists in Creativeitem Ekushey CRM that stems from insufficient validation of user input and could lead to a stored cross-site scripting attack...

Rancher data falsification vulnerability

Rancher is an open source container management platform from the US-based Rancher Open Source, built for organizations deploying containers in production environments. Rancher suffers from a Data Forgery Issue vulnerability that stems from a flaw in the SAML authentication protocol that could lea...

Yoshop security vulnerabilities

Yoshop is a Chinese yiovo open source e-commerce system. A security vulnerability exists in Yoshop version 2.0, which originates from unvalidated goodsIds parameter and may lead to SQL injection attack...

Adaptive Deception Framework with Behavioral Analysis for Enhanced Cybersecurity Defense

This paper presents CADL Cognitive-Adaptive Deception Layer, an adaptive deception framework achieving 99.88% detection rate with 0.13% false positive rate on the CICIDS2017 dataset. The framework employs ensemble machine learning Random Forest, XGBoost, Neural Networks combined with behavioral...

[SECURITY] Fedora 42 Update: firefox-143.0.3-1.fc42

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Number withdrawal

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux in the United States. This CVE number has been withdrawn...

CVE-2025-59681

An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. QuerySet.annotate, QuerySet.alias, QuerySet.aggregate, and QuerySet.extra are subject to SQL injection in column aliases, when using a suitably crafted dictionary, with dictionary expansion, as the kwarg...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a memory leak in the rtwusbprobe function that could lead to memory exhaustion...