EUVD-2023-49585

Malicious code in bioql PyPI...

EUVD-2023-57185

Malicious code in bioql PyPI...

EUVD-2023-59791

Malicious code in bioql PyPI...

EUVD-2022-55569

Malicious code in bioql PyPI...

EUVD-2024-30780

Malicious code in bioql PyPI...

EUVD-2022-54528

Malicious code in bioql PyPI...

EUVD-2025-7318

Malicious code in bioql PyPI...

EUVD-2022-55570

Malicious code in bioql PyPI...

EUVD-2025-25760

Malicious code in bioql PyPI...

EUVD-2022-49887

Malicious code in bioql PyPI...

EUVD-2025-24979

Malicious code in bioql PyPI...

EUVD-2023-59946

Malicious code in bioql PyPI...

EUVD-2025-27912

Malicious code in bioql PyPI...

EUVD-2022-49886

Malicious code in bioql PyPI...

EUVD-2025-12929

Malicious code in bioql PyPI...

CVE-2025-59839 Star Citizen EmbedVideo Extension Stored XSS through wikitext caused by usage of non-reserved data attributes

The EmbedVideo Extension is a MediaWiki extension which adds a parser function called ev and various parser tags for embedding video clips from various video sharing services. In versions 4.0.0 and prior, the EmbedVideo extension allows adding arbitrary attributes to an HTML element, allowing for...

CVE-2025-59839 Star Citizen EmbedVideo Extension Stored XSS through wikitext caused by usage of non-reserved data attributes

The EmbedVideo Extension is a MediaWiki extension which adds a parser function called ev and various parser tags for embedding video clips from various video sharing services. In versions 4.0.0 and prior, the EmbedVideo extension allows adding arbitrary attributes to an HTML element, allowing for...

CVE-2025-59839

Summary (CVE-2025-59839): The Star Citizen Wiki EmbedVideo Extension (MediaWiki) versions 4.0.0 and earlier allowed adding arbitrary HTML attributes via wikitext, enabling stored XSS through non-reserved data attributes (e.g., data-iframeconfig). Evidence from multiple sources notes this XSS clas...

SUSE CVE-2023-53185

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes A bad USB device is able to construct a service connection response message with target endpoint being ENDPOINT0 which is reserved for HTCCTRLRSVDSVC and should not be...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: idle: Check acpifetchacpidev return value CVE-2022-50327 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix helper writes to read-only maps CVE-2024-49861 In the Linux...