Malicious code in arno-baidu-test (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-48483 Malicious code in arno-baidu-test (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in ab-test-wordpress (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-48477 Malicious code in ab-test-wordpress (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Targeted Pooled Latent-Space Steganalysis Applied to Generative Steganography, with a Fix

Steganographic schemes dedicated to generated images modify the seed vector in the latent space to embed a message, whereas most steganalysis methods attempt to detect the embedding in the image space. This paper proposes to perform steganalysis in the latent space by modeling the statistical...

Linux Distros Unpatched Vulnerability : CVE-2022-50529

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: testfirmware: fix memory leak in testfirmwareinit When miscregister failed in...

Clutch Control: An Attention-Based Combinatorial Bandit for Efficient Mutation in JavaScript Engine Fuzzing

JavaScript engines are widely used in web browsers, PDF readers, and server-side applications. The rise in concern over their security has led to the development of several targeted fuzzing techniques. However, existing approaches use random selection to determine where to perform mutations in...

kernel: HID: core: Harden s32ton() against conversion to 0 bits

In the Linux kernel, the following vulnerability has been resolved: HID: core: Harden s32ton against conversion to 0 bits Testing by the syzbot fuzzer showed that the HID core gets a shift-out-of-bounds exception when it tries to convert a 32-bit quantity to a 0-bit quantity. Ideally this should...

[SECURITY] Fedora 41 Update: python3.12-3.12.12-1.fc41

Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable:...

Exploit for CVE-2025-61984

Test-CVE-2025-61984 Ref...

ArtPerception: ASCII Art-Based Jailbreak on LLMs with Recognition Pre-Test

The integration of Large Language Models LLMs into computer applications has introduced transformative capabilities but also significant security challenges. Existing safety alignments, which primarily focus on semantic interpretation, leave LLMs vulnerable to attacks that use non-standard data...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : go1.25-openssl (SUSE-SU-2025:03525-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:03525-1 advisory. Update to version 1.25.1, released 2025-09-03 bsc1244485. Security issues fixed: - CVE-2025-47910:...

EUVD-2025-33596

Malicious code in @evo-tech/backoffice-test-api npm...

Malware in @evo-tech/backoffice-test-api

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-48289 Malicious code in @evo-tech/backoffice-test-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 931d6e176eaebf4b172dba6fd81800d7257f741ffad464c014dc9fcd085bcba4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for CVE-2025-4476

CVE-2025-4476-Exploit A small Python test client to send HTTP...

SUSE CVE-2022-50529

In the Linux kernel, the following vulnerability has been resolved: testfirmware: fix memory leak in testfirmwareinit When miscregister failed in testfirmwareinit, the memory pointed by testfwconfig-name is not released. The memory leak information is as follows: unreferenced object...

org.keycloak.testframework:keycloak-test-framework-core (26.1.4), org.keycloak.testframework:keycloak-test-framework-db-mariadb (26.1.4) +17 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.1.4)

org.keycloak:keycloak-model-storage-services MAVEN version 26.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak.testframework:keycloak-test-framework-core 26.1.4 -...

org.keycloak.testframework:keycloak-test-framework-core (26.2.1), org.keycloak.testframework:keycloak-test-framework-db-mariadb (26.2.1) +18 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.2.1)

org.keycloak:keycloak-model-storage-services MAVEN version 26.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak.testframework:keycloak-test-framework-core 26.2.1 -...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (5.7.3), org.keycloak.testframework:keycloak-test-framework-clustering (26.6.4) +27 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.6.4)

org.keycloak:keycloak-model-storage-services MAVEN version 26.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - de.arbeitsagentur.opdt:keycloak-cassandra-model-tests 5.7.3 -...