EUVD-2006-5444

Malware in sbrugna...

EUVD-2008-5991

Malware in sbrugna...

EUVD-2017-14735

Malware in sbrugna...

EUVD-2021-24943

Malware in sbrugna...

EUVD-2019-16856

Malware in sbrugna...

EUVD-2022-0991

Malicious code in bioql PyPI...

EUVD-2023-34298

Malicious code in bioql PyPI...

EUVD-2025-2293

Malicious code in bioql PyPI...

Authentication Security of PRF GNSS Ranging

This work derives the authentication security of pseudorandom function PRF GNSS ranging under multiple GNSS spoofing models, including the Security Code Estimation and Replay SCER spoofer. When GNSS ranging codes derive from a PRF utilizing a secret known only to the broadcaster, the spoofer cann...

SVG Security Analysis Toolkit

SVG Security Analysis Toolkit contains specialized Python tools for analyzing potentially malicious SVG files and detecting security mechanisms...

Exploit for Missing Authorization in Elementor Website_Builder

Отчёт по учебной практике Содержание - 1. Введение1-в...

Exploit for CVE-2025-2894

Unitree Robot BLE Service Command Injection Analysis !Meme...

PT-2025-37117

Name of the Vulnerable Software and Affected Versions PuneethReddyHC Event Management System version 1.0 Description A reflected Cross-Site Scripting XSS issue exists in the register.php script. The mobile parameter is not properly validated, and its value is echoed in the HTTP response without...

Malicious code in turboscan-client (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis aadd88a4cebcc045db4b6899180a44c571f6429b26ead528721f7474c03110a0 The OpenSSF Package Analysis project identified 'turboscan-client' @ 99.99.99 rubygems as malicious. It is considered malicious because: - The...

PT-2026-33168

Name of the Vulnerable Software and Affected Versions AMD Platform Configuration Blob APCB SMM driver affected versions not specified Description Incorrect use of boot service in the AMD Platform Configuration Blob APCB SMM driver could allow a privileged attacker with local access Ring 0 to...

MoEcho: Exploiting Side-Channel Attacks to Compromise User Privacy in Mixture-Of-Experts LLMs

The transformer architecture has become a cornerstone of modern AI, fueling remarkable progress across applications in natural language processing, computer vision, and multimodal learning. As these models continue to scale explosively for performance, implementation efficiency remains a critical...

Attack Graph Generation on HPC Clusters

Attack graphs AGs are graphical tools to analyze the security of computer networks. By connecting the exploitation of individual vulnerabilities, AGs expose possible multi-step attacks against target networks, allowing system administrators to take preventive measures to enhance their network's...

SAEL: Leveraging Large Language Models with Adaptive Mixture-Of-Experts for Smart Contract Vulnerability Detection

With the increasing security issues in blockchain, smart contract vulnerability detection has become a research focus. Existing vulnerability detection methods have their limitations: 1 Static analysis methods struggle with complex scenarios. 2 Methods based on specialized pre-trained models...

TEE-reversing

This repository is an offensive tool for learning how to reverse-engineer and achieve trusted code execution on ARM devices. It contains a curated list of public TEE resources, including papers on TEE reversing and security analysis. The repository includes links to various papers and resources o...

MAL-2025-6231 Malicious code in bufbuild-core (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ea2a6d8f75509bff2876bce466f00b9c7c810394f46e6479c6e2d8b19acc9557 The OpenSSF Package Analysis project identified 'bufbuild-core' @ 1.0...