Lucene search
+L

1911 matches found

CNNVD
CNNVD
added 2025/07/16 12:0 a.m.9 views

WordPress plugin Profiler - What Slowing Down Your WP 安全漏洞

WordPress Profiler-What Slowing Down Your WP is a plugin for checking the speed of your website, mainly used to analyze the impact of plugins on the loading speed of your website. WordPress Profiler-What Slowing Down Your WP suffers from a missing authorization vulnerability that can be exploited...

6.5CVSS6.7AI score0.00203EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
added 2025/07/15 12:0 a.m.7 views

Security Debt in Practice: Nuanced Insights from Practitioners

With the increasing reliance on software and automation nowadays, tight deadlines, limited resources, and prioritization of functionality over security can lead to insecure coding practices. When not handled properly, these constraints cause unaddressed security vulnerabilities to accumulate over...

7AI score
SaveExploits0
Packet Storm News
Packet Storm News
added 2025/06/22 12:0 a.m.23 views

KEENHash: Hashing Programs into Function-Aware Embeddings for Large-Scale Binary Code Similarity Analysis

Binary code similarity analysis BCSA is a crucial research area in many fields such as cybersecurity. Specifically, function-level diffing tools are the most widely used in BCSA: they perform function matching one by one for evaluating the similarity between binary programs. However, such methods...

7.1AI score
SaveExploits0
Packet Storm News
Packet Storm News
added 2025/06/21 12:0 a.m.5 views

MECHA: Multithreaded and Efficient Cryptographic Hardware Access

This paper presents a multithread and efficient cryptographic hardware access MECHA for efficient and fast cryptographic operations that eliminates the need for context switching. Utilizing a UNIX domain socket, MECHA manages multiple requests from multiple applications simultaneously, resulting ...

6.9AI score
SaveExploits0
Packet Storm News
Packet Storm News
added 2025/06/21 12:0 a.m.7 views

Certified Randomness from Quantum Speed Limits

Quantum speed limits are usually regarded as fundamental restrictions, constraining the amount of computation that can be achieved within some given time and energy. Complementary to this intuition, here we show that these limitations are also of operational value: they enable the secure generati...

6.7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/06/19 11:35 a.m.7 views

Malicious code in web-speed-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a061b921a44e1b6ddb0a7050eb5156679a950673f1fcfa787aa15ada94251219 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2025/06/19 11:35 a.m.12 views

MAL-2025-5188 Malicious code in web-speed-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a061b921a44e1b6ddb0a7050eb5156679a950673f1fcfa787aa15ada94251219 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Schneier on Security
Schneier on Security
added 2025/06/17 11:8 a.m.12 views

Where AI Provides Value

If you've worried that AI might take your job, deprive you of your livelihood, or maybe even replace your role in society, it probably feels good to see the latest AI tools fail spectacularly. If AI recommends glue as a pizza topping, then you're safe for another day. But the fact remains that AI...

7.1AI score
SaveExploits0
AstraLinux
AstraLinux
added 2025/06/16 11:28 a.m.4 views

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Prevention of division by zero The user can set any speed value. If the speed is greater than UINTMAX/8, a division by zero is possible. Found by the Linux Verification Center linuxtesting.org with SVACE...

5.5CVSS6.2AI score0.00176EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2025/06/16 11:28 a.m.6 views

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Prevention of division by zero The user can set any speed value. If the speed is greater than UINTMAX/8, a division by zero is possible. Found by the Linux Verification Center linuxtesting.org with SVACE...

5.5CVSS6.3AI score0.0018EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2025/06/16 11:28 a.m.3 views

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm/smu11: Prevent division by zero The user can set any speed value. If the speed is greater than UINTMAX/8, division by zero is possible. Found by the Linux Verification Center linuxtesting.org with SVACE. Cherry-picked...

5.5CVSS6.2AI score0.00176EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2025/06/16 11:28 a.m.4 views

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Prevention of division by zero The user can set any speed value. If the speed is greater than UINTMAX/8, a division by zero is possible. Found by the Linux Verification Center linuxtesting.org with SVACE...

5.5CVSS6.2AI score0.00176EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2025/06/16 11:28 a.m.5 views

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Prevention of division by zero The user can set any speed value. If the speed is greater than UINTMAX/8, a division by zero is possible. Found by the Linux Verification Center linuxtesting.org with SVACE...

5.5CVSS6.2AI score0.0018EPSS
SaveExploits0References3
Fedora
Fedora
added 2025/05/30 1:45 a.m.14 views

[SECURITY] Fedora 41 Update: ruff-0.11.5-2.fc41

An extremely fast Python linter and code formatter, written in Rust. Ruff aims to be orders of magnitude faster than alternative tools while integrating more functionality behind a single, common interface. Ruff can be used to replace Flake8 plus dozens of plugins, Black, isort, pydocstyle,...

6.5CVSS7.4AI score0.00484EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/23 10:16 a.m.10 views

CVE-2024-32532

Missing Authorization vulnerability in SiteGround Speed Optimizer.This issue affects Speed Optimizer: from n/a through 7.4.6...

5.3CVSS5.2AI score0.0052EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:46 a.m.10 views

CVE-2024-53738

Server-Side Request Forgery SSRF vulnerability in Gabe Livan Asset CleanUp: Page Speed Booster wp-asset-clean-up allows Server Side Request Forgery.This issue affects Asset CleanUp: Page Speed Booster: from n/a through = 1.3.9.8...

4.4CVSS7.2AI score0.0027EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:27 a.m.12 views

CVE-2024-36061

EnGenius EWS356-FIT devices through 1.1.30 allow blind OS command injection. This allows an attacker to execute arbitrary OS commands via shell metacharacters to the Ping and Speed Test utilities...

9.8CVSS8.3AI score0.01068EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:19 a.m.8 views

CVE-2024-36060

EnGenius EnStation5-AC A8J-ENS500AC 1.0.0 devices allow blind OS command injection via shell metacharacters in the Ping and Speed Test parameters...

8.8CVSS7.7AI score0.01396EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:39 a.m.7 views

CVE-2023-26543

Cross-Site Request Forgery CSRF vulnerability in Aleksandr Guidrevitch WP Meteor Website Speed Optimization Addon plugin = 3.1.4 versions...

8.8CVSS7AI score0.00309EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 4:18 a.m.8 views

CVE-2023-41917

Inadequate input validation exposes the system to potential remote code execution RCE risks. Attackers can exploit this vulnerability by appending shell commands to the Speed-Measurement feature, enabling unauthorized code execution...

10CVSS8.1AI score0.00711EPSS
SaveExploits0
Rows per page
Query Builder