3845 matches found
CVE-2025-30661
An Incorrect Permission Assignment for Critical Resource vulnerability in line card script processing of Juniper Networks Junos OS allows a local, low-privileged user to install scripts to be executed as root, leading to privilege escalation. A local user with access to the local file system can...
CVE-2025-52981 Junos OS: SRX Series: Sequence of specific PIM packets causes a flowd crash
An Improper Check for Unusual or Exceptional Conditions vulnerability in the flow processing daemon flowd of Juniper Networks Junos OS on SRX1600, SRX2300, SRX 4000 Series, and SRX5000 Series with SPC3 allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. If a sequen...
MH-FSF: a Unified Framework for Overcoming Benchmarking and Reproducibility Limitations in Feature Selection Evaluation
Feature selection is vital for building effective predictive models, as it reduces dimensionality and emphasizes key features. However, current research often suffers from limited benchmarking and reliance on proprietary datasets. This severely hinders reproducibility and can negatively impact...
CVE-2025-21446
Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests...
CVE-2025-38253
creationtimestamp| type| source ---|---|--- 2025-07-09 14:15:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltjyuui5xv25...
CVE-2025-21446
Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests...
CVE-2025-21446
CVE-2025-21446 affects Qualcomm chipsets where WLAN frame processing for BTM requests can trigger a transient Denial-of-Service when parsing vendor-specific information elements. The root cause is improper handling of vendor IEs in the WLAN firmware during BTM parsing, leading to resource exhaust...
CVE-2025-25270
An unauthenticated remote attacker can alter the device configuration in a way to get remote code execution as root with specific configurations...
GHSA-9VFW-WX65-C872
creationtimestamp| type| source ---|---|--- 2025-07-07 19:47:32+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114813675213683577...
CVE-2025-20300
In Splunk Enterprise versions below 9.4.2, 9.3.5, 9.2.6, and 9.1.9 and Splunk Cloud Platform versions below 9.3.2411.103, 9.3.2408.112, and 9.2.2406.119, a low-privileged user that does not hold the "admin" or "power" Splunk roles, and has read-only access to a specific alert, could suppress that...
CVE-2025-7117
creationtimestamp| type| source ---|---|--- 2025-07-07 09:30:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltehzl6di42v 2026-01-08 20:16:37+00:00| published-proof-of-concept| Telegram/uSoyqQ1neOSvpczYFw3ZaIsgxZ8GH3YIUEo4EhZncagPFqk...
CVE-2025-26850
The agent in Quest KACE Systems Management Appliance SMA before 14.0.97 and 14.1.x before 14.1.19 potentially allows privilege escalation on managed systems...
Rethinking and Exploring String-Based Malware Family Classification in the Era of LLMs and RAG
Malware Family Classification MFC aims to identify the fine-grained family e.g., GuLoader or BitRAT to which a potential malware sample belongs, in contrast to malware detection or sample classification that predicts only an Yes/No. Accurate family identification can greatly facilitate automated...
CVE-2025-38232 NFSD: fix race between nfsd registration and exports_proc
In the Linux kernel, the following vulnerability has been resolved: NFSD: fix race between nfsd registration and exportsproc As of now nfsd calls createprocexportsentry at start of initnfsd and cleanup by removeprocentry at last of exitnfsd. Which causes kernel OOPs if there is race between below...
When There Is No Decoder: Removing Watermarks from Stable Diffusion Models in a No-Box Setting
Watermarking has emerged as a promising solution to counter harmful or deceptive AI-generated content by embedding hidden identifiers that trace content origins. However, the robustness of current watermarking techniques is still largely unexplored, raising critical questions about their...
CVE-2025-6627
creationtimestamp| type| source ---|---|--- 2025-06-25 18:51:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19503 2025-06-25 21:34:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lshkvlhbh62m 2025-06-30 20:26:59+00:00| seen|...
CLSA-2025-1750785145 tomcat: Fix of CVE-2025-31651
CVE-2025-31651: enforces rewrite rules to preventing bypass of security constraints in specific configurations...
CVE-2025-34031
creationtimestamp| type| source ---|---|--- 2025-06-24 01:35:37+00:00| published-proof-of-concept| Telegram/FWQuDCGkB48s3X-ytLLRs8ob9H-1PG5fjzb6WWUrU09iwg 2025-06-24 02:48:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19296 2025-06-24 04:26:56+00:00| seen|...
Can One Safety Loop Guard Them All? Agentic Guard Rails for Federated Computing
We propose Guardian-FC, a novel two-layer framework for privacy preserving federated computing that unifies safety enforcement across diverse privacy preserving mechanisms, including cryptographic back-ends like fully homomorphic encryption FHE and multiparty computation MPC, as well as statistic...