Lucene search
+L

151 matches found

Packet Storm News
Packet Storm News
added 2025/05/26 12:0 a.m.6 views

Language of Network: a Generative Pre-Trained Model for Encrypted Traffic Comprehension

The increasing demand for privacy protection and security considerations leads to a significant rise in the proportion of encrypted network traffic. Since traffic content becomes unrecognizable after encryption, accurate analysis is challenging, making it difficult to classify applications and...

6.6AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/22 9:36 p.m.7 views

CVE-2021-43854

NLTK Natural Language Toolkit is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. Versions prior to 3.6.5 are vulnerable to regular expression denial of service ReDoS attacks. The vulnerability is present in...

7.5CVSS6.7AI score0.02668EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2025/04/29 12:0 a.m.12 views

PT-2025-18141

Name of the Vulnerable Software and Affected Versions huggingface/transformers library version v4.48.1 Description A Regular Expression Denial of Service ReDoS vulnerability was identified in the huggingface/transformers library, specifically in the file tokenization gpt neox japanese.py of the...

6.5CVSS6.2AI score0.00438EPSS
SaveExploits1References16
Packet Storm News
Packet Storm News
added 2025/04/18 12:0 a.m.22 views

Detecting Zero-Day Web Attacks with an Ensemble of LSTM, GRU, and Stacked Autoencoders

The rapid growth in web-based services has significantly increased security risks related to user information, as web-based attacks become increasingly sophisticated and prevalent. Traditional security methods frequently struggle to detect previously unknown zero-day web attacks, putting sensitiv...

6.7AI score
SaveExploits0
OSV
OSV
added 2025/04/16 6:16 p.m.8 views

AZL-60485 CVE-2025-22872 affecting package telegraf for versions less than 1.31.0-10

The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...

6.5CVSS6.6AI score0.00513EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/03/22 1:11 p.m.11 views

CVE-2024-12720

A Regular Expression Denial of Service ReDoS vulnerability was identified in the huggingface/transformers library, specifically in the file tokenizationnougatfast.py. The vulnerability occurs in the postprocesssingle function, where a regular expression processes specially crafted input. The issu...

7.5CVSS6.7AI score0.00684EPSS
SaveExploits0References1
OSV
OSV
added 2025/03/20 10:11 a.m.12 views

CVE-2024-12720 Regular Expression Denial of Service (ReDoS) in huggingface/transformers

A Regular Expression Denial of Service ReDoS vulnerability was identified in the huggingface/transformers library, specifically in the file tokenizationnougatfast.py. The vulnerability occurs in the postprocesssingle function, where a regular expression processes specially crafted input. The issu...

5.3CVSS6.4AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/03/20 10:11 a.m.8 views

CVE-2024-12720 Regular Expression Denial of Service (ReDoS) in huggingface/transformers

A Regular Expression Denial of Service ReDoS vulnerability was identified in the huggingface/transformers library, specifically in the file tokenizationnougatfast.py. The vulnerability occurs in the postprocesssingle function, where a regular expression processes specially crafted input. The issu...

5.3CVSS5.2AI score0.00684EPSS
SaveExploits0References2
OSV
OSV
added 2025/02/03 8:16 a.m.3 views

MAL-2025-1074 Malicious code in climate-tokenization-engine-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6c54fe1dfe0ee0595094f7b5480bc0761286fb1ad1460e48b4eb6be7e274f52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/02/03 8:16 a.m.5 views

Malicious code in climate-tokenization-engine-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6c54fe1dfe0ee0595094f7b5480bc0761286fb1ad1460e48b4eb6be7e274f52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2025/01/30 4:55 p.m.7 views

MAL-2025-692 Malicious code in tokenization-lab (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/01/30 4:55 p.m.8 views

Malicious code in tokenization-lab (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

6.9AI score
SaveExploits0
HackRead
HackRead
added 2024/05/29 12:1 p.m.17 views

Blocksquare Hits $100M Tokenized RWA Triggering Launchpad Release

By Uzair Amir Blocksquare, a leading real estate tokenization platform, announces a major milestone: $100 million worth of real estate tokenized… This is a post from HackRead.com Read the original post: Blocksquare Hits $100M Tokenized RWA Triggering Launchpad Release...

7.3AI score
SaveExploits0
HackRead
HackRead
added 2024/05/29 12:1 p.m.20 views

Blocksquare Hits $100M Tokenized RWA Triggering Launchpad Release

By Uzair Amir Blocksquare, a leading real estate tokenization platform, announces a major milestone: $100 million worth of real estate tokenized… This is a post from HackRead.com Read the original post: Blocksquare Hits $100M Tokenized RWA Triggering Launchpad Release...

7.3AI score
SaveExploits0
OSV
OSV
added 2024/03/06 11:10 a.m.59 views

BIT-VAULT-2022-25244

Vault Enterprise clusters using the tokenization transform feature can expose the tokenization key through the tokenization key configuration endpoint to authorized operators with read permissions on this endpoint. Fixed in Vault Enterprise 1.9.4, 1.8.9 and 1.7.10...

6.5CVSS6.3AI score0.00953EPSS
SaveExploits0References3
OSV
OSV
added 2024/03/06 11:7 a.m.27 views

BIT-GOLANG-2020-29510

The encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the semantics of directives during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications...

9.8CVSS7AI score0.02047EPSS
SaveExploits0References3
OSV
OSV
added 2024/03/06 11:6 a.m.22 views

BIT-GOLANG-2020-29511

The encoding/xml package in Go all versions does not correctly preserve the semantics of element namespace prefixes during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications...

9.8CVSS7AI score0.01942EPSS
SaveExploits0References3
Wallarm Lab
Wallarm Lab
added 2024/01/08 1:0 p.m.19 views

Mastercard Cybersecurity

Safeguarding Trade: Discovering the World of Mastercard Digital Guardrails In our tech-driven era, it is vitro important that financial dealings are shielded competently. A colossal number of exchanges are happening each day, proving the ever growing necessity of sturdy digital protective measure...

7.5AI score
SaveExploits0
Github Security Blog
Github Security Blog
added 2023/08/23 8:37 p.m.23 views

XWiki Platform vulnerable to CSRF privilege escalation/RCE via the create action

Impact The create action is vulnerable to a CSRF attack, allowing script and thus remote code execution when targeting a user with script/programming right, thus compromising the confidentiality, integrity and availability of the whole XWiki installation. To reproduce, the XWiki syntax...

9CVSS7.8AI score0.00545EPSS
SaveExploits1References6Affected Software1
Imperva Blog
Imperva Blog
added 2023/04/27 5:10 p.m.28 views

Imperva® and Fortanix Partner to Protect Confidential Customer Data

Imperva Data Security Fabric and Fortanix Data Security Manager combine to provide end-to-end data security. Imperva, Inc., @Imperva the cybersecurity leader that protects critical applications, APIs, and data, anywhere at scale, and Fortanix, Inc. @Fortanix, the Data Security company powered by...

6.3AI score
SaveExploits0
Rows per page
Query Builder