3354 matches found
PT-2025-48046
A heap-buffer-overflow vulnerability exists in the Rust wrapper for libnftnl, triggered via the nftnl::Batch::with page size constructor. When a small or malformed page size is provided, the underlying C code allocates an insufficient buffer, leading to out-of-bounds writes during batch...
Keras framework vulnerable to deserialization of untrusted data
Deserialization of untrusted data can occur in versions of the Keras framework running versions 3.11.0 up to but not including 3.11.3, enabling a maliciously uploaded Keras file containing a TorchModuleWrapper class to run arbitrary code on an end user’s system when loaded despite safe mode being...
org.keycloak:keycloak-dependencies-admin-ui-wrapper (21.0.2), org.keycloak:keycloak-quarkus-integration-tests (21.0.2) +3 more potentially affected by CVE-2025-10044 via org.keycloak:keycloak-admin-ui (21.0.2)
org.keycloak:keycloak-admin-ui MAVEN version 21.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-admin-ui and may be impacted: - org.keycloak:keycloak-dependencies-admin-ui-wrapper 21.0.2 -...
Deserialization of Untrusted Data
Overview keras is a Keras is a high-level neural networks API for Python.. Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the fromconfig method that uses Python’s pickle module as a fall back when weightsonly=False. An attacker can execute arbitrary code ...
PT-2025-42617
Name of the Vulnerable Software and Affected Versions Keras versions 3.11.0 through 3.11.2 Description The Keras framework is susceptible to a critical security issue stemming from unsafe deserialization of untrusted data. Specifically, when loading Keras files containing a maliciously crafted...
Security Bulletin: Multiple vulnerabilities reported in YAJSW service shipped in IBM WebSphere eXtreme Scale Liberty Deployment
Summary YAJSWYet Another Java Service Wrapper uses Apache Commons and Netty to manage services, launch and monitor application etc. WebSphere eXtreme Scale Liberty deployments, uses YAJSW to register services with the operating system. CVE-2025-27553, CVE-2025-30474 and CVE-2025-25193...
Malware in ad-react-wrapper
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious Package
Overview ad-react-wrapper is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
EUVD-2000-0037
Malware in sbrugna...
EUVD-2020-5861
Malware in sbrugna...
EUVD-2019-0249
Malware in sbrugna...
EUVD-2019-0278
Malware in sbrugna...
EUVD-2019-0210
Malware in sbrugna...
EUVD-2019-0250
Malware in sbrugna...
EUVD-2019-0321
Malware in sbrugna...
EUVD-2021-19269
Malware in sbrugna...
EUVD-2019-0242
Malware in sbrugna...
EUVD-2019-0356
Malware in sbrugna...