Lucene search
K

44 matches found

Packet Storm News
Packet Storm News
added 2025/09/27 12:0 a.m.3 views

AutoML in Cybersecurity: An Empirical Study

Automated machine learning AutoML has emerged as a promising paradigm for automating machine learning ML pipeline design, broadening AI adoption. Yet its reliability in complex domains such as cybersecurity remains underexplored. This paper systematically evaluates eight open-source AutoML...

6.9AI score
Exploits0
OSV
OSV
added 2025/09/05 5:10 p.m.1 views

MAL-2025-42679 Malicious code in @lbnqduy180500/musical-winner (npm)

The package @lbnqduy180500/musical-winner was found to contain malicious code...

7AI score
Exploits0
OSV
OSV
added 2025/09/05 5:10 p.m.1 views

MAL-2025-42686 Malicious code in @lbnqduy2180500/scaling-octo-winner (npm)

The package @lbnqduy2180500/scaling-octo-winner was found to contain malicious code...

7AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/09/05 5:10 p.m.0 views

Malicious code in @lbnqduy180500/musical-winner (npm)

The package @lbnqduy180500/musical-winner was found to contain malicious code...

7AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/09/05 5:10 p.m.0 views

Malicious code in @lbnqduy2180500/scaling-octo-winner (npm)

The package @lbnqduy2180500/scaling-octo-winner was found to contain malicious code...

7AI score
Exploits0
CNVD
CNVD
added 2025/02/28 12:0 a.m.2 views

ChurchCRM CurrentFundraiser Parameter Blind SQL Injection Vulnerability

ChurchCRM is an open source church management system. ChurchCRM suffers from a blind SQL injection vulnerability that stems from the CurrentFundraiser parameter being directly attached to a SQL query without sufficient cleanup, which can be exploited by an attacker to execute arbitrary SQL querie...

9.3CVSS6.1AI score0.00108EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/08/06 12:0 a.m.1 views

School Event Management System 跨站脚本漏洞

School Event Management System is a school event management system. A cross-site scripting vulnerability exists in School Event Management System version 1.0. An attacker can use this vulnerability to send a specially crafted query to the server to retrieve all information stored in...

7.1CVSS5.8AI score0.00174EPSS
Exploits0References2
Openbugbounty
Openbugbounty
added 2024/04/03 12:16 p.m.10 views

winner-aircon.com.hk Cross Site Scripting vulnerability OBB-3898323

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
Exploits0
Code423n4
Code423n4
added 2023/11/13 12:0 a.m.7 views

Missing highBid value update returnHighestBidder would return the wrong HighestBidder causing nft to be minted to the wrong winner

Lines of code Vulnerability details Impact returnHighestBidder is used in checking who the winner is, however the code implemented in doing this was flawed as it missed updating highBid variable for the current higest bid found so far before next iteration. Missing this would cost function to...

7.2AI score
Exploits0
Code423n4
Code423n4
added 2023/11/13 12:0 a.m.7 views

AuctionDemo::claimAuction() - L105: Logic bug in the conditional statement where the timestamp check should be > instead of >=.

Lines of code Vulnerability details Impact Would enable the winning bidder/bid to be selected WHILE it's still possible to bid higher in the auction. I.e. current comparison logic makes it possible to select auction winner while the auction isnt over yet. there's the risk of the true/valid highes...

6.9AI score
Exploits0
Code423n4
Code423n4
added 2023/11/13 12:0 a.m.6 views

AuctionDemo::claimAuction() - L105: Logic bug in the conditional statement where the timestamp check should be > instead of >=.

Lines of code Vulnerability details Impact Would enable the winning bidder/bid to be selected WHILE it's still possible to bid higher in the auction. I.e. current comparison logic makes it possible to select auction winner while the auction isnt over yet. there's the risk of the true/valid highes...

6.9AI score
Exploits0
Vulnrichment
Vulnrichment
added 2023/02/06 12:0 a.m.9 views

CVE-2023-24198

Raffle Draw System v1.0 was discovered to contain multiple SQL injection vulnerabilities at savewinner.php via the ticketid and draw parameters...

8.6AI score0.0025EPSS
Exploits1References2
Malwarebytes
Malwarebytes
added 2022/03/28 3:40 p.m.15 views

Telling stories securely, with Runa Sandvik: Lock and Code S03E07

In 2017, a former NSA contractor named Reality Winner was arrested for allegedly leaking an internal report to the online news outlet The Intercept. To verify the report itself, a journalist for The Intercept sent an image of the report to the NSA, but upon further inspection, it was revealed tha...

7.3AI score
Exploits0
Code423n4
Code423n4
added 2022/03/02 12:0 a.m.12 views

An offer made after auction end can be stolen by an auction winner

Lines of code Vulnerability details Impact An Offer which is made for an NFT when auction has ended, but its winner hasn't received the NFT yet, can be stolen by this winner as transferFromEscrow being called by acceptOffer will transfer the NFT to the winner, finalising the auction, while no...

6.6AI score
Exploits0
Prion
Prion
added 2021/08/10 2:15 p.m.8 views

Code injection

Winner aka ToneWinner desktop speakers through 2021-08-09 allow remote attackers to recover speech signals from the power-indicator LED via a telescope and an electro-optical sensor, aka a "Glowworm" attack...

4.3CVSS4.5AI score0.0026EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2021/08/10 1:18 p.m.30 views

CVE-2021-38365

The connected documents identify CVE-2021-38365 as affecting ToneWinner (Winner) desktop speakers. The vulnerability allows a remote attacker to recover speech signals from the power-indicator LED using a telescope and an electro-optical sensor, a classically described Glowworm attack. The descri...

4.3CVSS4.5AI score0.0026EPSS
Exploits1References2Affected Software1
Microsoft Secure
Microsoft Secure
added 2021/07/14 3:0 p.m.32 views

MISA expands portfolio and looks ahead during Microsoft Inspire

This blog post is part of the Microsoft Intelligent Security Association MISA guest blog series. Learn more about MISA. Welcome to fiscal year 2022 FY22 and my first official blog as the MISA Lead. It’s been a whirlwind couple of months getting up to speed with all things MISA—closing out FY21...

6.7AI score
Exploits0
Openbugbounty
Openbugbounty
added 2020/09/28 5:40 p.m.30 views

and-the-winner-is.co.uk Cross Site Scripting vulnerability OBB-1371116

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
Exploits0
Carbon Black Blog
Carbon Black Blog
added 2019/09/12 2:30 p.m.30 views

Congratulations to our Query of the Month Winner for August 2019!

Our Query of The Month competition recognizes the top community-shared query that provides value to other Osquery users. To determine the query of the month, our team selects the customer query that has the most engagement or helps solve an important problem. The winner of the contest each month...

2AI score
Exploits0
The Hacker News
The Hacker News
added 2018/08/24 8:18 a.m.1 views

NSA Leaker 'Reality Winner' Gets More Than 5 Years in Prison

A former NSA contractor, who pleaded guilty to leaking a classified report on Russian hacking of the 2016 U.S. presidential election to an online news outlet last year, has been sentenced to five years and three months in prison. Reality Winner, a 26-year-old Georgia woman who held a top-secret...

6AI score
Exploits0
Rows per page
Query Builder