Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from a ulist leak in the btrfs qgroup self-test error path, which could lead to a memory leak...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel, which stems from a tracearray null pointer dereference in the kprobe event test, which could lead to a system crash...

CVE-2025-4071

A vulnerability has been found in PHPGurukul COVID19 Testing Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /test-details.php. The manipulation of the argument Status leads to sql injection. The attack can be initiated remotely. The exploit h...

PHPGurukul COVID19 Testing Management System 安全漏洞

The COVID19 Testing Management System is a new crown pneumonia testing management system. The COVID19 Testing Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter Status in the /test-details.php...

Malicious code in jd-npm-com-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f205097feb67db492d1ce42f141278ef445cb7792b8c530f866eb0a837e6d47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3497 Malicious code in jd-npm-com-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f205097feb67db492d1ce42f141278ef445cb7792b8c530f866eb0a837e6d47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

AI is getting “creepy good” at geo-guessing

If you are worried about revealing your exact location—or if you maybe even fib about it at times—there are some good reasons to worry about what is visible in background photos, because Artificial Intelligence AI is getting very good at guessing where you are based on the smallest of clues. And...

OESA-2025-1449 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: mm/khugepaged: fix -anonvma race If an -anonvma is attached to the VMA, collapseandfreepmd requires it to be locked. Page table traversal is allowed under any on...

Performance of Machine Learning Classifiers for Anomaly Detection in Cyber Security Applications

This work empirically evaluates machine learning models on two imbalanced public datasets KDDCUP99 and Credit Card Fraud 2013. The method includes data preparation, model training, and evaluation, using an 80/20 train/test split. Models tested include eXtreme Gradient Boosting XGB, Multi Layer...

Faraday 5.13.0

Faraday is a tool that introduces a new concept called IPE, or Integrated Penetration-Test Environment. It is a multiuser penetration test IDE designed for distribution, indexation and analysis of the generated data during the process of a security audit. The main purpose of Faraday is to re-use...

Differential Privacy-Driven Framework for Enhancing Heart Disease Prediction

With the rapid digitalization of healthcare systems, there has been a substantial increase in the generation and sharing of private health data. Safeguarding patient information is essential for maintaining consumer trust and ensuring compliance with legal data protection regulations. Machine...

Malicious code in test-kaks3c (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 591289fef82efe1b6a54e8948561a76e1e42addd4e1b62fe61364c894640b6b9 The OpenSSF Package Analysis project identified 'test-kaks3c' @ 10.0.4 npm as malicious. It is considered malicious because: - The package...

Malicious code in npm-test-lowerx3 (npm)

--- -= Per source details. Do not edit below this line.=-...

Exploit for CVE-2025-32965

It is an exploit module for CVE-2025-32965, a supply chain attac...

MAL-2025-3293 Malicious code in watch-test-unit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f501b9331b4c944a1dd7832349e4c20f23512f98948d44975636aa01952dc96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in watch-test-unit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f501b9331b4c944a1dd7832349e4c20f23512f98948d44975636aa01952dc96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.adjust.test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1c1175d9d178e089d813fa5fd10a1f34409c94f28af0ef4c4b0aa7d2424c77b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CBL Mariner 2.0 Security Update: graphviz (CVE-2023-46045)

The version of graphviz installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-46045 advisory. - Graphviz 2.36.0 through 9.x before 10.0.1 has an out-of-bounds read via a crafted config6a file. NOTE:...

PT-2025-28994

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A potential null pointer dereference issue was identified in the fpga mgr test img load sgt function. The function allocates memory for sgt using kunit kzalloc, but fails to verify if...

curl: Buffer Overflow in curl MQTT Test Server (tests/server/mqttd.c) via Malicious CONNECT Packet

Title: Buffer Overflow in curl MQTT Test Server mqttd.c via Malicious CONNECT Packet Description The MQTT test server mqttd.c in the curl project contains a buffer overflow vulnerability due to improper validation of password length fields in MQTT CONNECT packets. An attacker can craft a maliciou...