Lucene search
+L

2842 matches found

Packet Storm News
Packet Storm News
•added 2025/09/24 12:00 a.m.•18 views

Bi-GRPO: Bidirectional Optimization for Jailbreak Backdoor Injection on LLMs

With the rapid advancement of large language models LLMs, their robustness against adversarial manipulations, particularly jailbreak backdoor attacks, has become critically important. Existing approaches to embedding jailbreak triggers--such as supervised fine-tuning SFT, model editing, and...

7.3AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2025/09/24 12:00 a.m.•23 views

The vulnerability of the software solution for multidisciplinary optimization, the Multidisciplinary Optimization Engineer, arises from the lack of measures taken to protect website structures. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the software solution for multidisciplinary optimization relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

8.7CVSS5.7AI score0.0032EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2025/09/18 11:40 p.m.•15 views

SUSE CVE-2023-53153

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Fix use after free for wext Key information in wext.connect is not reset on reconnect and can hold data from a previous connection. Reset key data to avoid that drivers or mac80211 incorrectly detect a WEP...

5.5CVSS6.3AI score0.00164EPSS
SaveExploits0References8
HackRead
HackRead
•added 2025/09/18 10:57 p.m.•15 views

How Enterprise SEO Solutions Improve Brand Authority

Now, especially in a very competitive environment, it is essential to make your name shine. Enterprise SEO solutions…...

7AI score
SaveExploits0
SUSE CVE
SUSE CVE
•added 2025/09/15 11:29 p.m.•8 views

SUSE CVE-2022-50307

In the Linux kernel, the following vulnerability has been resolved: s390/cio: fix out-of-bounds access on cioignore free The channel-subsystem-driver scans for newly available devices whenever device-IDs are removed from the cioignore list using a command such as: echo free /proc/cioignore Since ...

7.1CVSS6.5AI score0.00161EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/09/15 2:46 p.m.•25 views

CVE-2022-50307 s390/cio: fix out-of-bounds access on cio_ignore free

In the Linux kernel, the following vulnerability has been resolved: s390/cio: fix out-of-bounds access on cioignore free The channel-subsystem-driver scans for newly available devices whenever device-IDs are removed from the cioignore list using a command such as: echo free /proc/cioignore Since ...

0.00161EPSS
SaveExploits0References3
OSV
OSV
•added 2025/09/15 2:15 p.m.•7 views

DEBIAN-CVE-2023-53153

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Fix use after free for wext Key information in wext.connect is not reset on reconnect and can hold data from a previous connection. Reset key data to avoid that drivers or mac80211 incorrectly detect a WEP...

7.8CVSS5.6AI score0.00164EPSS
SaveExploits0References1
OSV
OSV
•added 2025/09/15 2:15 p.m.•14 views

UBUNTU-CVE-2023-53153

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Fix use after free for wext Key information in wext.connect is not reset on reconnect and can hold data from a previous connection. Reset key data to avoid that drivers or mac80211 incorrectly detect a WEP...

7.8CVSS6.5AI score0.00164EPSS
SaveExploits0References11
CVE
CVE
•added 2025/09/15 2:03 p.m.•54 views

CVE-2023-53153

The CVE-2023-53153 entry describes a Linux kernel flaw in wifi cfg80211 (wext) where key data in wext.connect isn’t reset on (re)connect, allowing data from a prior connection to linger and potentially enable use-after-free during driver/mac80211 handling. The issue is fixed in the Linux kernel b...

7.8CVSS6AI score0.00164EPSS
SaveExploits0References8Affected Software1
OSV
OSV
•added 2025/09/15 2:03 p.m.•18 views

CVE-2023-53151 md/raid10: prevent soft lockup while flush writes

In the Linux kernel, the following vulnerability has been resolved: md/raid10: prevent soft lockup while flush writes Currently, there is no limit for raid1/raid10 plugged bio. While flushing writes, raid1 has condresched while raid10 doesn't, and too many writes can cause soft lockup. Follow up...

4.9AI score
SaveExploits0References11
Microsoft CVE
Microsoft CVE
•added 2025/09/13 8:03 a.m.•15 views

LoongArch: Optimize module load time by optimizing PLT/GOT counting

...

5.5CVSS7AI score0.00116EPSS
SaveExploits0
Cvelist
Cvelist
•added 2025/09/11 4:56 p.m.•30 views

CVE-2025-39767 LoongArch: Optimize module load time by optimizing PLT/GOT counting

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Optimize module load time by optimizing PLT/GOT counting When enabling CONFIGKASAN, CONFIGPREEMPTVOLUNTARYBUILD and CONFIGPREEMPTVOLUNTARY at the same time, there will be soft deadlock, the relevant logs are as follows...

0.00116EPSS
SaveExploits0References4
OSV
OSV
•added 2025/09/11 4:56 p.m.•9 views

CVE-2025-39767 LoongArch: Optimize module load time by optimizing PLT/GOT counting

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Optimize module load time by optimizing PLT/GOT counting When enabling CONFIGKASAN, CONFIGPREEMPTVOLUNTARYBUILD and CONFIGPREEMPTVOLUNTARY at the same time, there will be soft deadlock, the relevant logs are as follows...

5.7AI score
SaveExploits0References7
Packet Storm News
Packet Storm News
•added 2025/09/10 12:00 a.m.•15 views

Fluid-Antenna-Aided AAV Secure Communications in Eavesdropper Uncertain Location

For autonomous aerial vehicle AAV secure communications, traditional designs based on fixed position antenna FPA lack sufficient spatial degrees of freedom DoF, which leaves the line-of-sight-dominated AAV links vulnerable to eavesdropping. To overcome this problem, this paper proposes a framewor...

6.8AI score
SaveExploits0
CNNVD
CNNVD
•added 2025/09/10 12:00 a.m.•10 views

WordPress plugin WP Blast | SEO & Performance Booster 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

4.3CVSS6.4AI score0.00169EPSS
SaveExploits0References6
Veracode
Veracode
•added 2025/09/09 6:02 a.m.•12 views

Improper Access Control

@astrojs/node is vulnerable to Improper Access Control. The vulnerability is due to improper validation of image source domains in the image optimization endpoint, which allows an attacker to bypass third-party domain restrictions using protocol-relative URLs and serve unauthorized external image...

6.9CVSS7AI score0.00637EPSS
SaveExploits1References4Affected Software2
Packet Storm News
Packet Storm News
•added 2025/09/09 12:00 a.m.•10 views

A Non-Monotonic Relationship: an Empirical Analysis of Hybrid Quantum Classifiers for Unseen Ransomware Detection

Detecting unseen ransomware is a critical cybersecurity challenge where classical machine learning often fails. While Quantum Machine Learning QML presents a potential alternative, its application is hindered by the dimensionality gap between classical data and quantum hardware. This paper...

6.6AI score
SaveExploits0
NVD
NVD
•added 2025/09/05 12:15 a.m.•15 views

CVE-2025-58179

Astro is a web framework for content-driven websites. Versions 11.0.3 through 12.6.5 are vulnerable to SSRF when using Astro's Cloudflare adapter. When configured with output: 'server' while using the default imageService: 'compile', the generated image optimization endpoint doesn't check the URL...

7.2CVSS0.00829EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2025/09/05 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2025-55173

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Next.js is a React framework for building full-stack web applications. In versions before 14.2.31 and from 15.0.0 to before 15.4.5, Next.js Image Optimization i...

4.3CVSS5.3AI score0.00546EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/09/05 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2025-57752

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Next.js is a React framework for building full-stack web applications. In versions before 14.2.31 and from 15.0.0 to before 15.4.5, Next.js Image Optimization A...

6.2CVSS5AI score0.00349EPSS
SaveExploits0References2
Rows per page
Query Builder