Linux Distros Unpatched Vulnerability : CVE-2016-4768

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to execute arbitrary code or cause ...

CVE-2025-57263

An authenticated SQL injection vulnerability in VX Guestbook 1.07 allows attackers with admin access to inject malicious SQL payloads via the "word" POST parameter in the words.php admin panel...

CVE-2025-57263

An authenticated SQL injection vulnerability in VX Guestbook 1.07 allows attackers with admin access to inject malicious SQL payloads via the "word" POST parameter in the words.php admin panel...

False Sense of Security: Why Probing-Based Malicious Input Detection Fails to Generalize

Large Language Models LLMs can comply with harmful instructions, raising serious safety concerns despite their impressive capabilities. Recent work has leveraged probing-based approaches to study the separability of malicious and benign inputs in LLMs' internal representations, and researchers ha...

VX Guestbook 安全漏洞

VX Guestbook is a guestbook program by the individual developer of VX Guestbook. A security vulnerability exists in VX Guestbook version 1.07, which originates from an SQL injection in the word parameter in the words.php admin panel, which could lead to malicious SQL payload injection...

Linux Distros Unpatched Vulnerability : CVE-2024-5206

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fix...

Malicious code in most-common-turkish-words (npm)

The package most-common-turkish-words was found to contain malicious code...

gezi-core (>=0.0.0, <=0.0.2), meta-tags (0.0.0) potentially affected by unknown CVE via less-common-words (0.0.0)

less-common-words NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on less-common-words and may be impacted: - gezi-core =0.0.0, =0.0.2 - meta-tags 0.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25174...

gezi-core (>=0.0.0, <=0.0.2), less-common-words (0.0.0) +1 more potentially affected by unknown CVE via most-common-words (2.0.0)

most-common-words NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on most-common-words and may be impacted: - gezi-core =0.0.0, =0.0.2 - less-common-words 0.0.0 - meta-tags 0.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-267...

MAL-2025-25174 Malicious code in less-common-words (npm)

The package less-common-words was found to contain malicious code...

Malicious code in test-mlw2-stars-words (npm)

The package test-mlw2-stars-words was found to contain malicious code...

MAL-2025-36337 Malicious code in test-mlw2-stars-words (npm)

The package test-mlw2-stars-words was found to contain malicious code...

MAL-2025-26736 Malicious code in most-common-turkish-words (npm)

The package most-common-turkish-words was found to contain malicious code...

MAL-2025-26737 Malicious code in most-common-words (npm)

The package most-common-words was found to contain malicious code...

Malicious code in most-common-words (npm)

The package most-common-words was found to contain malicious code...

Malicious code in less-common-words (npm)

The package less-common-words was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2024-26994

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - speakup: Avoid crash on very long word In case a console is set up really large and contains a really long word 256 characters, we have to stop before the lengt...

📄 VX Guestbook 1.07 SQL Injection

VX Guestbook version 1.07 suffers from a remote SQL injection vulnerability. Exploit Title: VX Guestbook SQL Injection Authenticated Date: 2025-08-02 Exploit Author: tmrswrr Category : Webapps Vendor: https://phpversion.com/ Version 1.07 1. Access the Admin Panel: - Click Words Censor...

AZL-73046 CVE-2025-38477 affecting package kernel for versions less than 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: net/sched: schqfq: Fix race condition on qfqaggregate A race condition can occur when 'agg' is modified in qfqchangeagg called during qfqenqueue while other threads access it concurrently. For example, qfqdumpclass may trigger a...

Cyclic Equalizability of Words and Its Application to Card-Based Cryptography

Card-based cryptography is a research area to implement cryptographic procedures using a deck of physical cards. In recent years, it has been found to be related to finite group theory and algebraic combinatorics, and is becoming more and more closely connected to the field of mathematics. In thi...