2953 matches found
Linux Distros Unpatched Vulnerability : CVE-2025-37867
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/core: Silence oversized kvmalloc warning syzkaller triggered an oversized kvmalloc warning. Silence it by adding GFPNOWARN. syzkaller log: WARNING: CPU: 7...
Malicious code in serverless-plugin-rds-trigger (npm)
The package serverless-plugin-rds-trigger was found to contain malicious code...
MAL-2025-20717 Malicious code in flow_trigger_connector (npm)
The package flowtriggerconnector was found to contain malicious code...
MAL-2025-33007 Malicious code in serverless-plugin-rds-trigger (npm)
The package serverless-plugin-rds-trigger was found to contain malicious code...
MAL-2025-26196 Malicious code in menus-indexer-trigger (npm)
The package menus-indexer-trigger was found to contain malicious code...
Malicious code in flow_trigger_connector (npm)
The package flowtriggerconnector was found to contain malicious code...
Malicious code in menus-indexer-trigger (npm)
The package menus-indexer-trigger was found to contain malicious code...
Malicious code in jenkins-trigger-actio (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6936 Malicious code in jenkins-trigger-actio (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in jenkins-trigger-action (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fedbad1242e09329c414a95c493ce62c39c15cad4472ef5fc4a8b9b836834fb4 The OpenSSF Package Analysis project identified...
MAL-2025-6937 Malicious code in jenkins-trigger-action (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fedbad1242e09329c414a95c493ce62c39c15cad4472ef5fc4a8b9b836834fb4 The OpenSSF Package Analysis project identified...
IAG: Input-Aware Backdoor Attack on VLMs for Visual Grounding
Vision-language models VLMs have shown significant advancements in tasks such as visual grounding, where they localize specific objects in images based on natural language queries and images. However, security issues in visual grounding tasks for VLMs remain underexplored, especially in the conte...
PT-2025-32519 · Bullet3 +2 · Bullet3 +2
Name of the Vulnerable Software and Affected Versions: bulletphysics bullet3 versions prior to 3.26 Description: A stack-based buffer overflow exists in the LoadOFF function within bulletphysics bullet3. This issue allows remote attackers to execute arbitrary code by processing a crafted OFF file...
Linux Distros Unpatched Vulnerability : CVE-2022-4382
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free flaw caused by a race among the superblock operations in the gadgetfs Linux driver was found. It could be triggered by yanking out a device tha...
CVE-2012-10045
XODA version 0.4.5 contains an unauthenticated file upload vulnerability that allows remote attackers to execute arbitrary PHP code on the server. The flaw resides in the upload functionality, which fails to properly validate or restrict uploaded file types. By crafting a multipart/form-data POST...
BDFirewall: Towards Effective and Expeditiously Black-Box Backdoor Defense in MLaaS
In this paper, we endeavor to address the challenges of backdoor attacks countermeasures in black-box scenarios, thereby fortifying the security of inference under MLaaS. We first categorize backdoor triggers from a new perspective, i.e., their impact on the patched area, and divide them into:...
Medium: pam
Issue Overview: A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can trigger the victim program to execute by sending characters to its standard input stdin. As this occurs, the attacker can train the branch predictor to execute an ROP chain...
Proactive Disentangled Modeling of Trigger-Object Pairings for Backdoor Defense
Deep neural networks DNNs and generative AI GenAI are increasingly vulnerable to backdoor attacks, where adversaries embed triggers into inputs to cause models to misclassify or misinterpret target labels. Beyond traditional single-trigger scenarios, attackers may inject multiple triggers across...