TechniqueRAG: Retrieval Augmented Generation for Adversarial Technique Annotation in Cyber Threat Intelligence Text

Accurately identifying adversarial techniques in security texts is critical for effective cyber defense. However, existing methods face a fundamental trade-off: they either rely on generic models with limited domain precision or require resource-intensive pipelines that depend on large labeled...

CVE-2025-47793

Nextcloud Server is a self hosted personal cloud system, and the Nextcloud Groupfolders app provides admin-configured folders shared by everyone in a group or team. In Nextcloud Server prior to 30.0.2, 29.0.9, and 28.0.1, Nextcloud Enterprise Server prior to 30.0.2 and 29.0.9, and Nextcloud...

GHSA-Q568-2933-GCJQ

creationtimestamp| type| source ---|---|--- 2025-05-16 15:15:33+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114518165552832603 2025-05-16 15:16:04+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114518167613475040...

LLMs Unlock New Paths to Monetizing Exploits

We argue that Large language models LLMs will soon alter the economics of cyberattacks. Instead of attacking the most commonly used software and monetizing exploits by targeting the lowest common denominator among victims, LLMs enable adversaries to launch tailored attacks on a user-by-user basis...

CVE-2025-47292

creationtimestamp| type| source ---|---|--- 2025-05-14 11:02:17+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp4twxknlqp2 2025-05-14 11:31:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16302 2025-05-14...

CVE-2025-30330

creationtimestamp| type| source ---|---|--- 2025-05-13 18:11:21+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp32wuo3gar2 2025-05-13 20:48:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp3eafh2ou2w 2025-05-13...

CVE-2024-36340

creationtimestamp| type| source ---|---|--- 2025-05-13 14:30:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16123 2025-05-13 15:38:09+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp2rwgpccmz2 2025-05-13 17:13:08+00:00| seen|...

CVE-2025-40577

creationtimestamp| type| source ---|---|--- 2025-05-13 10:30:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16098 2025-05-13 10:48:12+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp2cmzo5rjk2 2025-05-13 10:52:38+00:00| seen|...

CVE-2025-40583

creationtimestamp| type| source ---|---|--- 2025-05-13 10:30:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16092 2025-05-13 10:48:11+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp2cmyg4m742 2025-05-13 10:52:44+00:00| seen|...

php: Filter bypass in filter_var (FILTER_VALIDATE_URL)

A flaw was found in PHP. An early return in the filtervar FILTERVALIDATEURL function results in invalid user information username + password part of URLs being treated as valid user information. This issue impacts users who expect only completely valid URLs to be returned by filtervar...

CVE-2025-31257

creationtimestamp| type| source ---|---|--- 2025-05-12 22:47:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loz2gacd3l22 2025-05-13 01:19:19+00:00| seen| https://t.me/cvedetector/25122 2026-05-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-1...

CVE-2025-4525

creationtimestamp| type| source ---|---|--- 2025-05-10 23:27:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15916 2025-05-10 23:27:37+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lou3qi56mef2 2025-05-11...

CVE-2025-46812

creationtimestamp| type| source ---|---|--- 2025-05-08 19:48:23+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3looojmngd3y2 2025-05-08 20:23:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15617 2025-05-08...

CVE-2025-47730

The TeleMessage archiving backend through 2025-05-05 accepts API calls to request an authentication token from the TM SGNL aka Archive Signal app with the credentials of logfile for the user and enRR8UVVywXYbFkqUQDPRkO for the password...

CVE-2025-3759

creationtimestamp| type| source ---|---|--- 2025-05-08 12:31:18+00:00| seen| Telegram/60cT2wlrThpaI2p205p7MoAi0oA9icyTsBVXTnXIGE3EPI 2025-05-08 12:31:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lonw6bewky2j 2025-05-08 13:26:01+00:00| seen| https://t.me/cvedetector/24813...

CLSA-2025-1746653856 ruby: Fix of 2 CVEs

upgrade rexml version to 3.3.3 - CVE-2024-41946: fix DoS vulnerability when parsing many entity expansions with SAX2 or pull parser API - CVE-2024-41123: fix DoS vulnerability when parsing XML with specific characters...

CVE-2025-31177

creationtimestamp| type| source ---|---|--- 2025-05-07 21:08:17+00:00| seen| https://bsky.app/profile/potato.software/post/3lomckwmwph24 2025-05-07 21:22:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15441 2025-05-07 21:25:56+00:00| seen|...

CVE-2025-20976

CVE-2025-20976 concerns Samsung Notes. Multiple sources confirm an out-of-bounds read in the binary-integration step when applying binary of text content, affecting Samsung Notes prior to version 4.4.29.23. The issue allows reading beyond allocated memory, with impact on confidentiality. A fix is...

Input-Specific and Universal Adversarial Attack Generation for Spiking Neural Networks in the Spiking Domain

As Spiking Neural Networks SNNs gain traction across various applications, understanding their security vulnerabilities becomes increasingly important. In this work, we focus on the adversarial attacks, which is perhaps the most concerning threat. An adversarial attack aims at finding a subtle...

GHSA-53WX-PR6Q-M3J5 Apache Parquet Java: Potential malicious code execution from trusted packages in the parquet-avro module when reading an Avro schema from a Parquet file metadata

Schema parsing in the parquet-avro module of Apache Parquet 1.15.0 and previous versions allows bad actors to execute arbitrary code. While 1.15.1 introduced a fix to restrict untrusted packages, the default setting of trusted packages still allows malicious classes from these packages to be...