8787 matches found
GraphAttack: Exploiting Representational Blindspots in LLM Safety Mechanisms
Large Language Models LLMs have been equipped with safety mechanisms to prevent harmful outputs, but these guardrails can often be bypassed through "jailbreak" prompts. This paper introduces a novel graph-based approach to systematically generate jailbreak prompts through semantic transformations...
Oracle Application Testing Suite (April 2025 CPU)
The versions of Oracle Application Testing Suite installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2025 CPU advisory. - Vulnerability in the Oracle Application Testing Suite product of Oracle Enterprise Manager component: Load Testing for Web Apps...
CVE-2024-58096 wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: add srng-lock for ath11khalsrng in monitor mode ath11khalsrng should be used with srng-lock to protect srng data. For ath11kdprxmondestprocess and ath11kdpfullmonprocessrx, they use ath11khalsrng for many times but...
From Searching in the Dark to Seeing Ahead With Hive Pro’s Enhanced BAS
Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. Click right here to hear it all on Hive Pro's Enhanced BAS! During a recent incident response, I...
Drupal Google Optimize 安全漏洞
Drupal Google Optimize is an online split testing tool for the Drupal community. A security vulnerability exists in Drupal Google Optimize. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the vendor announcement...
ARCeR: an Agentic RAG for the Automated Definition of Cyber Ranges
The growing and evolving landscape of cybersecurity threats necessitates the development of supporting tools and platforms that allow for the creation of realistic IT environments operating within virtual, controlled settings as Cyber Ranges CRs. CRs can be exploited for analyzing vulnerabilities...
Fedora 41 : dotnet9.0 (2025-2edd9dc83b)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-2edd9dc83b advisory. This is the monthly update for .NET 9 for March 2025. Release Notes: - SDK: https://github.com/dotnet/core/blob/main/release-notes/9.0/9.0.3/9.0.104.md -...
OpDiffer: LLM-Assisted Opcode-Level Differential Testing of Ethereum Virtual Machine
As Ethereum continues to thrive, the Ethereum Virtual Machine EVM has become the cornerstone powering tens of millions of active smart contracts. Intuitively, security issues in EVMs could lead to inconsistent behaviors among smart contracts or even denial-of-service of the entire blockchain...
InjectLab: a Tactical Framework for Adversarial Threat Modeling against Large Language Models
Large Language Models LLMs are changing the way people interact with technology. Tools like ChatGPT and Claude AI are now common in business, research, and everyday life. But with that growth comes new risks, especially prompt-based attacks that exploit how these models process language. InjectLa...
WalletProbe: a Testing Framework for Browser-Based Cryptocurrency Wallet Extensions
Serving as the first touch point for users to the cryptocurrency world, cryptocurrency wallets allow users to manage, receive, and transmit digital assets on blockchain networks and interact with emerging decentralized finance DeFi applications. Unfortunately, cryptocurrency wallets have always...
OpenPanel 0.3.4 - Incorrect Access Control
Exploit Title: OpenPanel 0.3.4 - Incorrect Access Control Date: Nov 25, 2024 Exploit Author: Korn Chaisuwan, Punthat Siriwan, Pongtorn Angsuchotmetee Vendor Homepage: https://openpanel.com/ Software Link: https://openpanel.com/ Version: 0.3.4 Tested on: macOS CVE : CVE-2024-53582 GET /files/../...
CBL Mariner 2.0 Security Update: libtiff (CVE-2023-6228)
The version of libtiff installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-6228 advisory. - An issue was found in the tiffcp utility distributed by the libtiff package where a crafted TIFF file on...
Exploit for Deserialization of Untrusted Data in Apache Tomcat
Apache Tomcat CVE-2025-24813 Proof of Concept PoC !License...
CVE-2025-32387 vulnerabilities
Vulnerabilities for packages: eksctl, chartmuseum, flux, k9s, kubescape, tw, k8ssandra-client, zot, pluto, cert-manager-cmctl, flux-source-controller, trivy, kots, chart-testing, helm-push, cilium-cli, helm-operator, flux-helm-controller, zarf, cluster-api-helm-controller, rancher-helm, helm-docs...
GHSA-4HFP-H4CW-HJ8P vulnerabilities
Vulnerabilities for packages: eksctl, chartmuseum, flux, k9s, kubescape, tw, k8ssandra-client, zot, pluto, cert-manager-cmctl, flux-source-controller, trivy, kots, chart-testing, helm-push, cilium-cli, helm-operator, flux-helm-controller, zarf, cluster-api-helm-controller, rancher-helm, helm-docs...
CVE-2025-32386 vulnerabilities
Vulnerabilities for packages: eksctl, chartmuseum, flux, k9s, kubescape, tw, k8ssandra-client, zot, pluto, cert-manager-cmctl, flux-source-controller, trivy, kots, chart-testing, helm-push, cilium-cli, helm-operator, flux-helm-controller, zarf, cluster-api-helm-controller, rancher-helm, helm-docs...
GHSA-5XQW-8HWV-WG92 vulnerabilities
Vulnerabilities for packages: eksctl, chartmuseum, flux, k9s, kubescape, tw, k8ssandra-client, zot, pluto, cert-manager-cmctl, flux-source-controller, trivy, kots, chart-testing, helm-push, cilium-cli, helm-operator, flux-helm-controller, zarf, cluster-api-helm-controller, rancher-helm, helm-docs...
GHSA-5XQW-8HWV-WG92 vulnerabilities
Vulnerabilities for packages: k9s, kots, consul-k8s-fips, helm-operator-fips, chartmuseum, kubescape, helm-push, trivy, flux, flux-helm-controller-fips, zot, k8ssandra-client, chart-testing-fips, flux-helm-controller, kuma, cluster-api-helm-controller, helm-docs, harbor-fips, helm-operator, eksct...
QuickResponseC2 - A Command & Control Server That Leverages QR Codes To Send Commands And Receive Results From Remote Systems
QuickResponseC2 is a stealthy Command and Control C2 framework that enables indirect and covert communication between the attacker and victim machines via an intermediate HTTP/S server. All network activity is limited to uploading and downloading images, making it an fully undetectable by IPS/IDS...