Lucene search
+L

2849 matches found

Packet Storm News
Packet Storm News
•added 2025/09/09 12:00 a.m.•10 views

A Non-Monotonic Relationship: an Empirical Analysis of Hybrid Quantum Classifiers for Unseen Ransomware Detection

Detecting unseen ransomware is a critical cybersecurity challenge where classical machine learning often fails. While Quantum Machine Learning QML presents a potential alternative, its application is hindered by the dimensionality gap between classical data and quantum hardware. This paper...

6.6AI score
SaveExploits0
NVD
NVD
•added 2025/09/05 12:15 a.m.•15 views

CVE-2025-58179

Astro is a web framework for content-driven websites. Versions 11.0.3 through 12.6.5 are vulnerable to SSRF when using Astro's Cloudflare adapter. When configured with output: 'server' while using the default imageService: 'compile', the generated image optimization endpoint doesn't check the URL...

7.2CVSS0.00829EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2025/09/05 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2025-55173

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Next.js is a React framework for building full-stack web applications. In versions before 14.2.31 and from 15.0.0 to before 15.4.5, Next.js Image Optimization i...

4.3CVSS5.3AI score0.00546EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/09/05 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2025-57752

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Next.js is a React framework for building full-stack web applications. In versions before 14.2.31 and from 15.0.0 to before 15.4.5, Next.js Image Optimization A...

6.2CVSS5AI score0.00349EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
•added 2025/09/03 8:10 a.m.•10 views

Security Bulletin: A vulnerability in form-data may affect IBM Decision Optimization for IBM Cloud Pak for Data (CVE-2025-7783)

Summary There is a vulnerability in form-data used by IBM Decision Optimization for IBM Cloud Pak for Data. IBM Decision Optimization for IBM Cloud Pak for Data has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2025-7783 DESCRIPTION: Use of Insufficiently Random Values vulnerabili...

9.4CVSS4.8AI score0.01769EPSS
SaveExploits1Affected Software1
Packet Storm News
Packet Storm News
•added 2025/09/03 12:00 a.m.•18 views

A Quantum Genetic Algorithm-Enhanced Self-Supervised Intrusion Detection System for Wireless Sensor Networks in the Internet of Things

The rapid expansion of the Internet of Things IoT and Wireless Sensor Networks WSNs has significantly increased the attack surface of such systems, making them vulnerable to a wide range of cyber threats. Traditional Intrusion Detection Systems IDS often fail to meet the stringent requirements of...

6.9AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2025/09/01 11:04 a.m.•11 views

Security Bulletin: A vulnerability in axios may affect IBM Decision Optimization for IBM Cloud Pak for Data (CVE-2024-57965)

Summary There is a vulnerability in axios used by IBM Decision Optimization for IBM Cloud Pak for Data. IBM Decision Optimization for IBM Cloud Pak for Data has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2024-57965 DESCRIPTION: In axios before 1.7.8,...

9.8CVSS7.3AI score0.00383EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/09/01 10:16 a.m.•13 views

Security Bulletin: A vulnerability in DOMPurify may affect IBM Decision Optimization for IBM Cloud Pak for Data (CVE-2025-48050)

Summary There is a vulnerability in DOMPurify used by IBM Decision Optimization for IBM Cloud Pak for Data. IBM Decision Optimization for IBM Cloud Pak for Data has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2025-48050 DESCRIPTION: In DOMPurify through 3.2.5 before 6bc6d60,...

7.5CVSS8.6AI score0.00468EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/09/01 10:11 a.m.•18 views

Security Bulletin: IBM Decision Optimization for Cloud Pak for Data is vulnerable to cross-site scripting attacks (CVE-2025-27793)

Summary There is a vulnerability in Vega used by IBM Decision Optimization for IBM Cloud Pak for Data. IBM Decision Optimization for IBM Cloud Pak for Data has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2025-27793 DESCRIPTION: Vega is a visualization grammar, a declarative form...

5.3CVSS6.4AI score0.00507EPSS
SaveExploits0Affected Software1
Packet Storm News
Packet Storm News
•added 2025/09/01 12:00 a.m.•11 views

An Intrusion Detection System in Internet of Things Using Grasshopper Optimization Algorithm and Machine Learning Algorithms

The Internet of Things IoT has emerged as a foundational paradigm supporting a range of applications, including healthcare, education, agriculture, smart homes, and, more recently, enterprise systems. However, significant advancements in IoT networks have been impeded by security vulnerabilities...

7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/09/01 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2025-52473

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. Multiple secret-dependent branches have been...

5.9CVSS6AI score0.00219EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/08/31 10:29 p.m.•8 views

CVE-2025-55173

A vulnerability in Next.js Image Optimization allowed attacker-controlled image servers to trigger arbitrary file downloads with custom content and filenames. Exploitation required permissive images.domains or images.remotePatterns and user interaction. Binary-Affected: Next.js...

4.3CVSS6.7AI score0.00546EPSS
SaveExploits0References6
NVD
NVD
•added 2025/08/29 10:15 p.m.•13 views

CVE-2025-55173

Next.js is a React framework for building full-stack web applications. In versions before 14.2.31 and from 15.0.0 to before 15.4.5, Next.js Image Optimization is vulnerable to content injection. The issue allowed attacker-controlled external image sources to trigger file downloads with arbitrary...

4.3CVSS0.00546EPSS
SaveExploits0References3
NVD
NVD
•added 2025/08/29 10:15 p.m.•11 views

CVE-2025-57752

Next.js is a React framework for building full-stack web applications. In versions before 14.2.31 and from 15.0.0 to before 15.4.5, Next.js Image Optimization API routes are affected by cache key confusion. When images returned from API routes vary based on request headers such as Cookie or...

6.2CVSS0.00349EPSS
SaveExploits0References4
CVE
CVE
•added 2025/08/29 10:06 p.m.•115 views

CVE-2025-57752

CVE-2025-57752 affects Next.js image optimization API routes. The cache key confusion bug can cause responses that depend on request headers (e.g., Cookie/Authorization) to be cached and served to unauthorized users. Impact: potential exposure of image responses to unintended users. Affected vers...

6.2CVSS6.3AI score0.00349EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2025/08/29 10:06 p.m.•4 views

CVE-2025-57752 Next.js Affected by Cache Key Confusion for Image Optimization API Routes

Next.js is a React framework for building full-stack web applications. In versions before 14.2.31 and from 15.0.0 to before 15.4.5, Next.js Image Optimization API routes are affected by cache key confusion. When images returned from API routes vary based on request headers such as Cookie or...

6.2CVSS6.3AI score0.00349EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/08/29 10:06 p.m.•16 views

CVE-2025-57752 Next.js Affected by Cache Key Confusion for Image Optimization API Routes

Next.js is a React framework for building full-stack web applications. In versions before 14.2.31 and from 15.0.0 to before 15.4.5, Next.js Image Optimization API routes are affected by cache key confusion. When images returned from API routes vary based on request headers such as Cookie or...

6.2CVSS0.00349EPSS
SaveExploits0References4
OSV
OSV
•added 2025/08/29 10:06 p.m.•19 views

CVE-2025-57752 Next.js Affected by Cache Key Confusion for Image Optimization API Routes

Next.js is a React framework for building full-stack web applications. In versions before 14.2.31 and from 15.0.0 to before 15.4.5, Next.js Image Optimization API routes are affected by cache key confusion. When images returned from API routes vary based on request headers such as Cookie or...

6.2CVSS6.5AI score
SaveExploits0References6
Snyk
Snyk
•added 2025/08/29 10:06 p.m.•14 views

Use of Cache Containing Sensitive Information

Overview next is a react framework. Affected versions of this package are vulnerable to Use of Cache Containing Sensitive Information in the image optimization process, when responses from API routes vary based on request headers such as Cookie or Authorization. An attacker can gain unauthorized...

6.3CVSS6.7AI score0.00349EPSS
SaveExploits0References2
OSV
OSV
•added 2025/08/29 10:06 p.m.•22 views

GHSA-G5QG-72QW-GW5V Next.js Affected by Cache Key Confusion for Image Optimization API Routes

A vulnerability in Next.js Image Optimization has been fixed in v15.4.5 and v14.2.31. When images returned from API routes vary based on request headers such as Cookie or Authorization, these responses could be incorrectly cached and served to unauthorized users due to a cache key confusion bug...

6.2CVSS5.8AI score0.00349EPSS
SaveExploits0References6
Rows per page
Query Builder