7487 matches found
AuthPrint: Fingerprinting Generative Models against Malicious Model Providers
Generative models are increasingly adopted in high-stakes domains, yet current deployments offer no mechanisms to verify the origin of model outputs. We address this gap by extending model fingerprinting techniques beyond the traditional collaborative setting to one where the model provider may a...
Cybersecurity of Quantum Key Distribution Implementations
Practical implementations of Quantum Key Distribution QKD often deviate from the theoretical protocols, exposing the implementations to various attacks even when the underlying ideal protocol is proven secure. We present new analysis tools and methodologies for quantum cybersecurity, adapting the...
Linux Distros Unpatched Vulnerability : CVE-2025-39989
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/mce: use iscopyfromuser to determine copy-from-user context Patch series mm/hwpoison: Fix regressions in memory failure handling, v4. 1. What am I trying to...
Linux Distros Unpatched Vulnerability : CVE-2025-38062
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - genirq/msi: Store the IOMMU IOVA directly in msidesc instead of iommucookie The IOMMU translation for MSI message addresses has been a 2-step process, separated...
CVE-2025-51060
An issue was discovered in CPUID cpuz.sys 1.0.5.4. An attacker can use DeviceIoControl with the unvalidated parameters 0x9C402440 and 0x9C402444 as IoControlCodes to perform RDMSR and WRMSR, respectively. Through this process, the attacker can modify MSRLSTAR and hook KiSystemCall64. Afterward,...
CyberGhostVPN 安全漏洞
CyberGhostVPN is a highly optimized VPN server from CyberGhostVPN Romania. CyberGhostVPN suffers from a security vulnerability that stems from the use of weak cryptographic hash algorithm SHA-1 signatures and the lack of high entropy ASLR, which could lead to a supply chain attack or elevation of...
Beyond Vulnerabilities: a Survey of Adversarial Attacks As Both Threats and Defenses in Computer Vision Systems
Adversarial attacks against computer vision systems have emerged as a critical research area that challenges the fundamental assumptions about neural network robustness and security. This comprehensive survey examines the evolving landscape of adversarial techniques, revealing their dual nature a...
Generative AI-Empowered Secure Communications in Space-Air-Ground Integrated Networks: a Survey and Tutorial
Space-air-ground integrated networks SAGINs face unprecedented security challenges due to their inherent characteristics, such as multidimensional heterogeneity and dynamic topologies. These characteristics fundamentally undermine conventional security methods and traditional artificial...
Security update for tgt
This update for tgt fixes the following issues: CVE-2024-45751: Fixed CHAP authentication bypass in user-space Linux target framework bsc1230360 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively yo...
SUSE-SU-2025:02591-1 Security update for tgt
This update for tgt fixes the following issues: - CVE-2024-45751: Fixed CHAP authentication bypass in user-space Linux target framework bsc1230360...
CVE-2025-8267
Versions of the package ssrfcheck before 1.2.0 are vulnerable to Server-Side Request Forgery SSRF due to an incomplete denylist of IP address ranges. Specifically, the package fails to classify the reserved IP address space 224.0.0.0/4 Multicast as invalid. This oversight allows attackers to craf...
RockyLinux 8 : thunderbird (RLSA-2025:10246)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:10246 advisory. thunderbird: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links CVE-2025-5986 Tenable has extracted the...
SUSE CVE-2025-38370
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix failure to rebuild free space tree using multiple transactions If we are rebuilding a free space tree, while modifying the free space tree we may need to allocate a new metadata block group. If we end up using multiple...
ghostscript security update
An update is available for ghostscript. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Ghostscript suite contains utilities for rendering PostScript and PDF...
thunderbird security update
An update is available for thunderbird. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Thunderbird is a standalone mail and newsgroup client. Security...
The vulnerability of the btrfs_endTransaction.transaction() function in Linux operating system kernels, which allows a hacker to trigger a service failure
The vulnerability of the btrfsendTransactionTransaction function in Linux operating system kernels is related to incorrect handling of elements of the free space tree during reconstitution. Exploiting this vulnerability can allow an attacker to cause service failures...
SUSE CVE-2024-58266
The shlex crate before 1.2.1 for Rust allows unquoted and unescaped instances of the and \xa0 characters, which may facilitate command injection...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from unreserved report ID space, which could lead to buffer underruns...