Bridging Threat Models and Detections: Formal Verification Via CADP

Threat detection systems rely on rule-based logic to identify adversarial behaviors, yet the conformance of these rules to high-level threat models is rarely verified formally. We present a formal verification framework that models both detection logic and attack trees as labeled transition syste...

CVE-2025-39780 sched/ext: Fix invalid task state transitions on class switch

In the Linux kernel, the following vulnerability has been resolved: sched/ext: Fix invalid task state transitions on class switch When enabling a schedext scheduler, we may trigger invalid task state transitions, resulting in warnings like the following which can be easily reproduced by running t...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to exclude terminated tasks during the scheduling class transition phase, which could lead to...

PT-2025-37237

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel related to invalid task state transitions when using the sched ext scheduler. This issue occurs because initialization is skipped for tasks that are...

Linux Distros Unpatched Vulnerability : CVE-2020-10996

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Percona XtraDB Cluster before 5.7.28-31.41.2. A bundled script inadvertently sets a static transitionkey for SST processes in place o...

PT-2025-36996

Name of the Vulnerable Software and Affected Versions: Prebid Universal Creative PUC versions 1.17.3 and latest Description: Prebid Universal Creative PUC is a JavaScript API used to render multiple formats. Npm users of PUC were briefly affected by crypto-related malware. Recommendations:...

Google Android elevation of privilege vulnerability (CNVD-2026-00037)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to a clickjacking/overwriting attack in finishTransition of Transition.java. An attacker can exploit this vulnerability to gain elevated privileges on...

CVE-2025-22417

In finishTransition of Transition.java, there is a possible way to bypass touch filtering restrictions due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2025-22417

CVE-2025-22417 affects Android where finishTransition in Transition.java can bypass touch filtering via a tapjacking/overlay attack, enabling local elevation of privilege with no extra execution privileges required. Exploitation requires user interaction. Documents consistently describe this as a...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to a clickjacking/overwriting attack in finishTransition of Transition.java. An attacker can exploit this vulnerability to gain elevated privileges on...

Are Enterprises Ready for Quantum-Safe Cybersecurity?

Quantum computing threatens to undermine classical cryptography by breaking widely deployed encryption and signature schemes. This paper examines enterprise readiness for quantum-safe cybersecurity through three perspectives: i the technologist view, assessing the maturity of post-quantum...

CVE-2025-49412

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in numixtech Page Transition page-transition allows Stored XSS.This issue affects Page Transition: from n/a through = 1.3...

CVE-2025-49412

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in numixtech Page Transition page-transition allows Stored XSS.This issue affects Page Transition: from n/a through = 1.3...

CVE-2025-49412

CVE-2025-49412 concerns the WordPress Page Transition plugin with versions n/a through 1.3. It exposes a Stored XSS due to improper neutralization of input during web page generation. Affected software: Page Transition plugin for WordPress. The CVSS base score is 5.9 (Medium) with network attack ...

CVE-2025-49412 WordPress Page Transition plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in numixtech Page Transition page-transition allows Stored XSS.This issue affects Page Transition: from n/a through = 1.3...

CVE-2025-49412 WordPress Page Transition plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in numixtech Page Transition page-transition allows Stored XSS.This issue affects Page Transition: from n/a through = 1.3...

PT-2025-33947 · Unknown · Numixtech Page Transition

Name of the Vulnerable Software and Affected Versions: numixtech Page Transition versions n/a through 1.3 Description: The software contains an Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' issue that allows Stored XSS. Recommendations: At the moment, there is...

WordPress plugin Page Transition 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2025-50897

A vulnerability exists in riscv-boom SonicBOOM 1.2 BOOMv1.2 processor implementation, where valid virtual-to-physical address translations configured with write permissions PTEW in SV39 mode may incorrectly trigger a Store/AMO access fault during store instructions sd. This occurs despite the...

WordPress Page Transition plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nabil Irawan Patchstack Alliance in WordPress Plugin Page Transition versions = 1.3...