EUVD-2023-26516

Malicious code in bioql PyPI...

EUVD-2022-15594

Malicious code in bioql PyPI...

RLSA-2025:10873 Important: java-21-openjdk security update

The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fixes: JDK: Better Glyph drawing CVE-2025-30749 JDK: Enhance TLS protocol support CVE-2025-30754 JDK: Improve HTTP client header handling CVE-2025-50059 JDK: Better...

java-21-openjdk security update

An update is available for java-21-openjdk. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime...

DirectAdmin Evolution Skin 安全漏洞

DirectAdmin Evolution Skin is an application from DirectAdmin, Inc. A security vulnerability exists in DirectAdmin Evolution Skin version 1.680 that stems from a specially crafted GET request that can manipulate the page layout, potentially causing the login screen to be replaced with...

CVE-2025-43953

In 2wcom IP-4c 2.16, the web interface allows admin and manager users to execute arbitrary code as root via a ping or traceroute field on the TCP/IP screen...

CVE-2025-43953

The 2wcom IP-4c audio codec device (version 2.16 ) is vulnerable to command injection (CWE-77) via its web interface. Specifically, the ping or traceroute fields on the TCP/IP screen allow authorized admin and manager users to execute arbitrary code with root privileges. The vulnerability is loca...

CVE-2025-43953

In 2wcom IP-4c 2.16, the web interface allows admin and manager users to execute arbitrary code as root via a ping or traceroute field on the TCP/IP screen...

2wcom IP-4c 安全漏洞

The 2wcom IP-4c is an audio codec device from the German company 2wcom. A security vulnerability exists in the 2wcom IP-4c version 2.16, which originates from a web interface that allows administrator and manager users to execute arbitrary code as root via the ping or traceroute fields on the...

The vulnerability of the GNU screen terminal multiplexer lies in the improper assignment of permissions to critical resources, allowing a intruder to gain unauthorized access to protected information.

The vulnerability of the GNU screen terminal multiplexer is related to the improper assignment of permissions for a critical resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the GNU screen terminal multiplexer, related to synchronization errors when using a shared resource (“Race Situation”), allows a intruder to increase their privileges.

The vulnerability of the GNU screen terminal multiplexer is related to synchronization errors when using a shared resource „Race Situation“. Exploiting this vulnerability can allow an attacker to gain elevated privileges...

The vulnerability of the GNU screen terminal multiplexer, related to the improper use of standard resolutions, allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the GNU screen terminal multiplexer is related to the incorrect use of standard resolutions. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

The vulnerability of the GNU screen terminal multiplexer, related to information disclosure due to incompatibility, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the terminal multiplexer in GNU screen is related to the disclosure of information through mismatches. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information. The vulnerability of the terminal multiplexer in GNU screen also...

SilentSync RAT Delivered via Two Malicious PyPI Packages Targeting Python Developers

Cybersecurity researchers have discovered two new malicious packages in the Python Package Index PyPI repository that are designed to deliver a remote access trojan called SilentSync on Windows systems. "SilentSync is capable of remote command execution, file exfiltration, and screen capturing,"...

SilentSync RAT Delivered via Two Malicious PyPI Packages Targeting Python Developers

Cybersecurity researchers have discovered two new malicious packages in the Python Package Index PyPI repository that are designed to deliver a remote access trojan called SilentSync on Windows systems. "SilentSync is capable of remote command execution, file exfiltration, and screen capturing,"...

Apple macOS Tahoe state mismanagement vulnerability

Apple macOS Tahoe is the 26th major release of Apple's macOS operating system, which was released on June 10, 2025, and features a new "Liquid Glass" visual design that significantly optimizes interface aesthetics, feature integration, and cross-device collaboration. The 26th major version of the...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not properly handling screen updates in a disabled state of the downstream interface, which could lead to a...

CVE-2025-24133

This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 26 and iPadOS 26. Keyboard suggestions may display sensitive information on the lock screen...

CVE-2025-31271

This issue was addressed through improved state management. This issue is fixed in macOS Tahoe 26. Incoming FaceTime calls can appear or be accepted on a locked macOS device, even with notifications disabled on the lock screen...

The vulnerability of Microsoft Edge’s Split Screen Mode allows a hacker to bypass security restrictions.

The vulnerability of Microsoft Edge’s Split Screen Mode is related to deficiencies in access control. Exploiting this vulnerability can allow a remote attacker to bypass security restrictions...