Grok 2.5 is now open source. Grok 3 will be open source in about 6 months

https://huggingface.co/xai-org/grok-2

- hn post
- twitter post

PoC for those who are interested:

https://github.com/b1n4r1b01/n-days/blob/main/CVE-2025-43300.md

Prompt:

change the ambience to an apocalyptic scene

Model: Gemini 2.5 Flash
Used image references

Spotify.

telegram added spotify
so spotify added telegram

job description redflags

CVE-2025-24893: (severity: 9.8/10)

XWiki Remote code execution as guest via SolrSearchMacros request.
Any guest can perform arbitrary remote code execution through a request to SolrSearch. This impacts the confidentiality, integrity and availability of the whole XWiki installation.

This vulnerability has been patched in XWiki 15.10.11, 16.4.1 and 16.5.0RC1.

- PoC (python)
- GitHub Advisory Database
- Template Source
- Macros.vm source
- patch commit

Weakness Enumeration:
- CWE-94: Improper Control of Generation of Code ('Code Injection')
- CWE-95: Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')

#cve #vulnerability #java

lets say a simple min-max prediction model has lots of parameters in it, leading to mostly data-snooping.
do you think in such a model, we can solve the data-snooping bias by adding millions of patterns with complex parameters, so it can cover more strict cases but also somehow DOES detect patterns?

never gets old

NPM debug and chalk packages compromised

🔸A malicious code was pushed to 18 popular npm packages, hijacking crypto and web3 activity in browsers. The attacker was caught and informed the maintainer after Aikido's intel feed alert, and some compromises were cleaned up.

packages list:

- backslash (0.26m downloads per week)
- chalk-template (3.9m downloads per week)
- supports-hyperlinks (19.2m downloads per week)
- has-ansi (12.1m downloads per week)
- simple-swizzle (26.26m downloads per week)
- color-string (27.48m downloads per week)
- error-ex (47.17m downloads per week)
- color-name (191.71m downloads per week)
- is-arrayish (73.8m downloads per week)
- slice-ansi (59.8m downloads per week)
- color-convert (193.5m downloads per week)
- wrap-ansi (197.99m downloads per week)
- ansi-regex (243.64m downloads per week)
- supports-color (287.1m downloads per week)
- strip-ansi (261.17m downloads per week)
- chalk (299.99m downloads per week)
- debug (357.6m downloads per week)
- ansi-styles (371.41m downloads per week)

> do largest supply chain attack in history
> potentially infect millions of apps
> doesnt do the thing good
> makes $0 from compromise

I don't wanna support the villain here, but my guy, you gotta lock in. You could have infected hundreds of millions of apps and you FUMBLE IT

(stole this post from here)

Researchers grouped the attacker’s wallets on Arkham under an entity named “NPM attack.” The data shows the attacker managed to steal only $66.

Windows KASLR Bypass – CVE-2025-53136

🔸Microsoft fixed a kernel address leak vulnerability in Windows 11/Server 2022 24H2, but introduced a new bug in CVE-2024-43511. The new bug allows a powerful kernel address leak through a race condition in the RtlSidHashInitialize() function.

11 Sep 2025

comments

Astrophysics Source Code Library

The Astrophysics Source Code Library (ASCL) is a free online registry and repository for source codes used in astronomy and astrophysics research. It is indexed by the SAO/NASA Astrophysics Data System (ADS) and Web of Science.

https://github.com/p2r3/bareiron

https://github.com/jart/cosmopolitan

"build-once run-anywhere" for c

CVE-2023-52440:
Linux kernel ksmbd: slub overflow in ksmbd_decode_ntlmssp_auth_blob function.
If authblob->SessionKey.Length is bigger than session key size (CIFS_KEY_SIZE), slub overflow can happen in key exchange codes. cifs_arc4_crypt copy to session key array from SessionKey of client.

- patch commit
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2023-4130:
Linux kernel ksmbd: wrong next length validation of ea buffer in smb2_set_ea function.
There are multiple smb2_ea_info buffers in FILE_FULL_EA_INFORMATION request from client.
ksmbd will then find next smb2_ea_info using ->NextEntryOffset of current smb2_ea_info. ksmbd needs to validate buffer length before accessing the next ea.
ksmbd should check buffer length using buf_len, not the next variable. next variable is the start offset of current ea that got from previous ea.

- patch commit

#cve #linux

Authenticated 0-click RCE against Linux 6.1.45 for CVE-2023-52440 and CVE-2023-4130

this POC was designed on an extremely out of date LTS kernel (6.1.45), on a custom kernel config, and on a custom build toolchain.

https://github.com/BitsByWill/ksmbd-n-day