Specification-Guided Vulnerability Detection with Large Language Models

Large language models LLMs have achieved remarkable progress in code understanding tasks. However, they demonstrate limited performance in vulnerability detection and struggle to distinguish vulnerable code from patched code. We argue that LLMs lack understanding of security specifications -- the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987686)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987686 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads This patch...

EUVD-2021-18504

Malware in sbrugna...

EUVD-2024-29282

Malicious code in bioql PyPI...

EUVD-2025-5567

Malicious code in bioql PyPI...

EUVD-2021-3496

Malicious code in bioql PyPI...

EUVD-2022-55183

Malicious code in bioql PyPI...

EUVD-2022-4706

Malicious code in bioql PyPI...

EUVD-2021-28865

Malicious code in bioql PyPI...

EUVD-2022-35461

Malicious code in bioql PyPI...

EUVD-2022-2994

Malicious code in bioql PyPI...

EUVD-2023-36923

Malicious code in bioql PyPI...

EUVD-2022-4613

Malicious code in bioql PyPI...

CVE-2025-49090

The Matrix specification before 1.16 i.e., with a room version before 12 and State Resolution before 2.1 has deficient state resolution...

Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities

Summary IBM QRadar SIEM includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. These have been addressed in the update. Vulnerability Details CVEID:CVE-2024-22365 DESCRIPTION: Linux-pam is vulnerable to a denial of service, caused by ...

A Red Teaming Roadmap Towards System-Level Safety

Large Language Model LLM safeguards, which implement request refusals, have become a widely adopted mitigation strategy against misuse. At the intersection of adversarial machine learning and AI safety, safeguard red teaming has effectively identified critical vulnerabilities in state-of-the-art...

MINI-735P-5XWH-P2GM

Bulletin has no description...

CVE-2023-6125

Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...

CVE-2022-47522

The IEEE 802.11 specifications through 802.11ax allow physically proximate attackers to intercept possibly cleartext target-destined frames by spoofing a target's MAC address, sending Power Save frames to the access point, and then sending other frames to the access point such as authentication...

Privacy-Preserving Runtime Verification

Runtime verification offers scalable solutions to improve the safety and reliability of systems. However, systems that require verification or monitoring by a third party to ensure compliance with a specification might contain sensitive information, causing privacy concerns when usual runtime...