Aggregator

AI 只能完成高等数学新测试问题的不到 2%(link is external)

Solidot
4 months 3 weeks ago
基于大模型的 AI 系统如 GPT-4 和 Gemini 1.5 Pro 能以九成以上的正确率完成传统数学测试问题。但如果设计出一种全新的、大模型不可能训练过的数学难题呢？包括菲尔兹奖得主陶哲轩和 Timothy Gowers 在内的 60 多名数学家合作编写了数百道原创研究级数学难题，推出了新的高等数学基准测试 FrontierMath。这些问题非常具有挑战性，陶哲轩称需要相关领域研究生级别的专业人士合作才能完成。问题被设计为防猜测，如果没有正确的数学推理能力，它们是不可能解出的。顶级的 AI 系统只能完成不到 2% 的 FrontierMath 问题，显示它们的推理能力有局限性。

Malware Spotlight:  A Deep-Dive Analysis of WezRat(link is external)

Check Point Research
4 months 3 weeks ago

Key Findings: Introduction On October 30th, the FBI, the US Department of Treasury, and the Israeli National Cybersecurity Directorate (INCD) released a joint Cybersecurity Advisory regarding recent activities of the Iranian cyber group Emennet Pasargad. The group recently operated under the name Aria Sepehr Ayandehsazan (ASA) and is affiliated with the Iranian Islamic Revolutionary Guard Corps (IRGC). […]

The post Malware Spotlight:  A Deep-Dive Analysis of WezRat appeared first on Check Point Research.

samanthar@checkpoint.com

CVE-2023-4458 | Linux Kernel ksmbd smb2_open out-of-bounds(link is external)

Vuldb Updates
4 months 3 weeks ago
A vulnerability, which was classified as problematic, was found in Linux Kernel. This affects the function smb2_open of the component ksmbd. The manipulation leads to out-of-bounds read. This vulnerability is uniquely identified as CVE-2023-4458. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

CVE-2024-11207 | Apereo CAS 6.6 /login redirect_uri(link is external)

Vuldb Updates
4 months 3 weeks ago
A vulnerability has been found in Apereo CAS 6.6 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /login. The manipulation of the argument redirect_uri leads to open redirect. This vulnerability is known as CVE-2024-11207. The attack can be launched remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

CVE-2024-11209 | Apereo CAS 6.6 2FA /login?service improper authentication(link is external)

Vuldb Updates
4 months 3 weeks ago
A vulnerability was found in Apereo CAS 6.6. It has been classified as critical. This affects an unknown part of the file /login?service of the component 2FA. The manipulation leads to improper authentication. This vulnerability is uniquely identified as CVE-2024-11209. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

CVE-2024-7730 | QEMU virtio-snd Device virtio_snd_pcm_in_cb heap-based overflow (Nessus ID 210736)(link is external)

Vuldb Updates
4 months 3 weeks ago
A vulnerability was found in QEMU. It has been declared as critical. Affected by this vulnerability is the function virtio_snd_pcm_in_cb of the component virtio-snd Device. The manipulation leads to heap-based buffer overflow. This vulnerability is known as CVE-2024-7730. The attack can only be done within the local network. There is no exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

CVE-2024-3447 | QEMU sdhci_write_dataport heap-based overflow (Nessus ID 209571)(link is external)

Vuldb Updates
4 months 3 weeks ago
A vulnerability was found in QEMU. It has been classified as critical. This affects the function sdhci_write_dataport. The manipulation leads to heap-based buffer overflow. This vulnerability is uniquely identified as CVE-2024-3447. Access to the local network is required for this attack. There is no exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

Managed ad