4180 matches found
CVE-2025-46762
Schema parsing in the parquet-avro module of Apache Parquet 1.15.0 and previous versions allows bad actors to execute arbitrary code. While 1.15.1 introduced a fix to restrict untrusted packages, the default setting of trusted packages still allows malicious classes from these packages to be...
CVE-2025-46762
Schema parsing in the parquet-avro module of Apache Parquet 1.15.0 and previous versions allows bad actors to execute arbitrary code. While 1.15.1 introduced a fix to restrict untrusted packages, the default setting of trusted packages still allows malicious classes from these packages to be...
CVE-2025-46762
Schema parsing in the parquet-avro module of Apache Parquet 1.15.0 and previous versions allows bad actors to execute arbitrary code. While 1.15.1 introduced a fix to restrict untrusted packages, the default setting of trusted packages still allows malicious classes from these packages to be...
CVE-2025-46762 Apache Parquet Java: Potential malicious code execution from trusted packages in the parquet-avro module when reading an Avro schema from a Parquet file metadata
Schema parsing in the parquet-avro module of Apache Parquet 1.15.0 and previous versions allows bad actors to execute arbitrary code. While 1.15.1 introduced a fix to restrict untrusted packages, the default setting of trusted packages still allows malicious classes from these packages to be...
CVE-2025-46762: External Control of File Name or Path
Schema parsing in the parquet-avro module of Apache Parquet 1.15.0 and previous versions allows bad actors to execute arbitrary code. While 1.15.1 introduced a fix to restrict untrusted packages, the default setting of trusted packages still allows malicious classes from these packages to be...
CVE-2023-53123 PCI: s390: Fix use-after-free of PCI resources with per-function hotplug
In the Linux kernel, the following vulnerability has been resolved: PCI: s390: Fix use-after-free of PCI resources with per-function hotplug On s390 PCI functions may be hotplugged individually even when they belong to a multi-function device. In particular on an SR-IOV device VFs may be removed...
Ai.Txt: a Domain-Specific Language for Guiding AI Interactions with the Internet
We introduce ai.txt, a novel domain-specific language DSL designed to explicitly regulate interactions between AI models, agents, and web content, addressing critical limitations of the widely adopted robots.txt standard. As AI increasingly engages with online materials for tasks such as training...
Cert-SSB: toward Certified Sample-Specific Backdoor Defense
Deep neural networks DNNs are vulnerable to backdoor attacks, where an attacker manipulates a small portion of the training data to implant hidden backdoors into the model. The compromised model behaves normally on clean samples but misclassifies backdoored samples into the attacker-specified...
CVE-2025-4082
CVE-2025-4082 involves a memory corruption vulnerability in the WebGL Shader Attribute Handler component of Mozilla Firefox , Mozilla Firefox ESR , and the Mozilla Thunderbird email client. Modification of specific WebGL shader attributes can trigger an out-of-bounds read , which, when chained wi...
MAL-2025-3527 Malicious code in jsonspecific (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 429c7a9887c0f21c1ed1e71850a3cd3434fd578694e65fcdfdb60d7aaf896e13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
VMware Spring Boot < 2.7.25, 3.0.x < 3.1.16, 3.2.x < 3.2.14, 3.3.x < 3.3.11, 3.4.x < 3.4.5 Matcher Vulnerability - Linux
VMware Spring Boot is prone to a matcher vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:springboot";...
CVE-2025-32432
Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Starting from version 3.0.0-RC1 to before 3.9.15, 4.0.0-RC1 to before 4.14.15, and 5.0.0-RC1 to before 5.6.17, Craft is vulnerable to remote code execution. This is a high-impact, low-complexity...
CVE-2025-24839
Mattermost versions 10.5.x = 10.5.1, 10.4.x = 10.4.3, 9.11.x = 9.11.9 fail to prevent Wrangler posts from triggering AI responses. This vulnerability allows users without access to the AI bot to activate it by attaching the activateai override property to a post via the Wrangler plugin, provided...
UBUNTU-CVE-2025-0639
An issue has been discovered affecting service availability via issue preview in GitLab CE/EE affecting all versions from 16.7 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1...
CVE-2025-1908 Business Logic Errors in GitLab
An issue has been discovered in GitLab EE/CE that could allow an attacker to track users' browsing activities, potentially leading to full account take-over, affecting all versions from 16.6 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1...
PCMan FTP Server Buffer Overflow Vulnerability (CNVD-2025-10692)
PCMan FTP Server is PCMan open source set of FTP software. PCMan FTP Server suffers from a buffer overflow vulnerability that stems from mishandling of specific requests. No detailed vulnerability details are provided at this time...
CVE-2025-3807
creationtimestamp| type| source ---|---|--- 2025-04-19 18:02:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12590 2025-04-19 21:50:03+00:00| seen| https://t.me/cvedetector/23391 2025-04-20 01:20:10+00:00| seen|...
CVE-2025-32434
creationtimestamp| type| source ---|---|--- 2025-04-18 15:58:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12473 2025-04-18 16:27:43+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114359904676181462 2025-04-18 18:31:46+00:00| published-proof-of-concept|...
Designing a Reliable Lateral Movement Detector Using a Graph Foundation Model
Foundation models have recently emerged as a new paradigm in machine learning ML. These models are pre-trained on large and diverse datasets and can subsequently be applied to various downstream tasks with little or no retraining. This allows people without advanced ML expertise to build ML...