123 matches found
EUVD-2017-6979
Malware in sbrugna...
EUVD-2022-24711
Malicious code in bioql PyPI...
EUVD-2024-24348
Malicious code in bioql PyPI...
EUVD-2024-43678
Malicious code in bioql PyPI...
EUVD-2025-30469
Malicious code in bioql PyPI...
EUVD-2023-27442
Malicious code in bioql PyPI...
CVE-2024-45433
OpenSynergy BlueSDK aka Blue SDK through 6.x has Incorrect Control Flow Scoping. The specific flaw exists within the BlueSDK Bluetooth stack. The issue results from the lack of proper return control flow after detecting an unusual condition. An attacker can leverage this to bypass a security...
CVE-2024-45433
OpenSynergy BlueSDK aka Blue SDK through 6.x has Incorrect Control Flow Scoping. The specific flaw exists within the BlueSDK Bluetooth stack. The issue results from the lack of proper return control flow after detecting an unusual condition. An attacker can leverage this to bypass a security...
OpenSynergy BlueSDK 安全漏洞
OpenSynergy BlueSDK is a Bluetooth stack from OpenSynergy, Germany. A security vulnerability exists in OpenSynergy BlueSDK 6.x and prior versions, which stems from the lack of proper return control flow after an exception condition is detected in the BlueSDK Bluetooth stack, which could lead to...
CVE-2024-45433
The OpenSynergy BlueSDK (also known as Blue SDK) Bluetooth stack is vulnerable to Incorrect Control Flow Scoping in versions through 6.x . The root cause is the improper handling of exceptional states and a lack of proper return control flow after detecting an unusual condition within the Bluetoo...
CVE-2024-45433: Incorrect Control Flow Scoping
OpenSynergy BlueSDK aka Blue SDK through 6.x has Incorrect Control Flow Scoping. The specific flaw exists within the BlueSDK Bluetooth stack. The issue results from the lack of proper return control flow after detecting an unusual condition. An attacker can leverage this to bypass a security...
CVE-2025-43275
A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to break out of its sandbox...
Microsoft Graphics Component Windows 11 Pro (Build 26100+) - Local Elevation of Privileges
Exploit Title : Microsoft Graphics Component Windows 11 Pro Build 26100+ - Local Elevation of Privileges Author: nu11secur1ty Date: 07/11/2025 --- Overview This repository contains a PowerShell script to validate whether a Windows 11 system is vulnerable to CVE-2025-49744—a critical local privile...
A Rusty Link in the AI Supply Chain: Detecting Evil Configurations in Model Repositories
Recent advancements in large language models LLMs have spurred the development of diverse AI applications from code generation and video editing to text generation; however, AI supply chains such as Hugging Face, which host pretrained models and their associated configuration files contributed by...
The Rise of Intelligent Security Validation: What a Month of Enhanced BAS Revealed
Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. Click right here to hear it all on CAASM & CDMB Inefficiencies! Four weeks ago, a major healthcare...
PT-2025-17135 · Buildium · Buildium
Name of the Vulnerable Software and Affected Versions: Listings for Buildium versions 0.1.4 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that also allows Stored XSS. This means an attacker could potentially trick a user into performing unintende...
From Searching in the Dark to Seeing Ahead With Hive Pro’s Enhanced BAS
Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. Click right here to hear it all on Hive Pro's Enhanced BAS! During a recent incident response, I...
Unpacking a post-compromise breach simulation with Vector Command
The reality of modern cyber threats In today’s evolving cyber landscape, breaches are not a matter of if , but when. Attackers continue to refine their techniques, using stealthy post-compromise tactics to maintain persistence, escalate privileges, and move laterally across networks. The key to...
Windows Registry Enumerated Software Report
Reports details about software enumerated using the registry TRUSTED...
Cyber Story Time: The Boy Who Cried "Secure!"
As a relatively new security category, many security operators and executives I've met have asked us "What are these Automated Security Validation ASV tools?" We've covered that pretty extensively in the past, so today, instead of covering the "What is ASV?" I wanted to address the "Why ASV?"...