EUVD-2025-73954

Malicious code in responsibleswordtailz3n npm...

EUVD-2025-73956

Malicious code in responsibleseahorsez3n npm...

Malicious code in responsible_snake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 161ea21a6aa903d885e9e99b0c48c6948f65bbba9c228ed6e1b79b5af8392880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in responsible_seahorse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcc88e22a2aa525637d0e069faed2a017af2b1d8a2518fbf856734c0ad0ce104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-73959

Malicious code in responsiblebuzzardz3n npm...

EUVD-2025-52284

Malicious code in responsible-azure-harrier npm...

EUVD-2025-49475

Malicious code in responsiblespoonbillz3n npm...

EUVD-2025-49477

Malicious code in responsiblecrocodilez3n npm...

EUVD-2025-45603

Malicious code in responsiblekitez3n npm...

Whisper Leak: A Side-Channel Attack on Large Language Models

Large Language Models LLMs are increasingly deployed in sensitive domains including healthcare, legal services, and confidential communications, where privacy is paramount. This paper introduces Whisper Leak, a side-channel attack that infers user prompt topics from encrypted LLM traffic by...

Prompt injection in Opera Neon: Rapid response through responsible disclosure

Security Prompt injection in Opera Neon: Rapid response through responsible disclosure Share October 23rd, 2025 Hi Opera users, This week, we were able to address a real-world security scenario on Opera Neon thanks to the work of a security researcher team. The researchers reached out to us throu...

AWS VDP: Responsible disclosure - public S3 bucket exposing JSON/config files

A publicly listable S3 bucket was discovered, exposing various JSON and configuration files. The bucket listing and file metadata were retrievable without authentication...

POCs

Proof of Concepts This repository contains Proof of Concept...

EUVD-2020-6173

Malware in sbrugna...

EUVD-2024-20971

Malicious code in bioql PyPI...

EUVD-2024-26052

Malicious code in bioql PyPI...

IoTFuzzSentry: a Protocol Guided Mutation Based Fuzzer for Automatic Vulnerability Testing in Commercial IoT Devices

Protocol fuzzing is a scalable and cost-effective technique for identifying security vulnerabilities in deployed Internet of Things devices. During their operational phase, IoT devices often run lightweight servers to handle user interactions, such as video streaming or image capture in smart...

[Extended] Ethics in Computer Security Research: a Data-Driven Assessment of the Past, the Present, and the Possible Future

Ethical questions are discussed regularly in computer security. Still, researchers in computer security lack clear guidance on how to make, document, and assess ethical decisions in research when what is morally right or acceptable is not clear-cut. In this work, we give an overview of the...

Exploit for Path Traversal in Igniterealtime Openfire

!Burp Suitehttps://img.shields.io/badge/Burp%20Suite-Pro%20E...

Dow’s 125-year legacy: Innovating with AI to secure a long future

Founded more than 125 years ago, Dow has demonstrated a commitment to leveraging science to make the world a better place. Today, Dow’s ambition to be the most innovative, inclusive, and sustainable materials science company is supported by a global security team dedicated to keeping employees,...