EUVD-2023-2684

Malicious code in bioql PyPI...

EUVD-2025-26741

Malicious code in bioql PyPI...

EUVD-2024-0186

Malicious code in bioql PyPI...

EUVD-2022-1097

Malicious code in bioql PyPI...

EUVD-2022-55423

Malicious code in bioql PyPI...

EUVD-2023-31521

Malicious code in bioql PyPI...

EUVD-2025-32005

Malicious code in bioql PyPI...

EUVD-2022-46330

Malicious code in bioql PyPI...

EUVD-2025-6799

Malicious code in bioql PyPI...

EUVD-2023-1588

Malicious code in bioql PyPI...

EUVD-2025-19797

Malicious code in bioql PyPI...

EUVD-2022-7100

Malicious code in bioql PyPI...

EUVD-2024-2315

Malicious code in bioql PyPI...

EUVD-2022-6723

Malicious code in bioql PyPI...

RLSA-2025:8131 Moderate: ruby security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fixes: net-imap: Net::IMAP vulnerable to possible DoS by memory exhaustion CVE-2025-25186 CGI: Denial of Service in CGI::Cookie.parse...

The parse_str function in (1) PHP, (2) Hardened-PHP, and (3) Suhosin, when called without a second parameter, might allow remote attackers to overwrite arbitrary variables by specifying variable names and values in the string to be parsed. NOTE: it is not clear whether this is a design limitation of the function or a bug in PHP, although it is likely to be regarded as a bug in Hardened-PHP and Suhosin.

...

SUSE CVE-2023-53479

In the Linux kernel, the following vulnerability has been resolved: cxl/acpi: Fix a use-after-free in cxlparsecfmws KASAN and KFENCE detected an user-after-free in the CXL driver. This happens in the cxldecoderadd fail path. KASAN prints the following error: BUG: KASAN: slab-use-after-free in...

The parse_dict_node function in bplist.c in libplist allows attackers to cause a denial of service

...

Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, a different vulnerability than CVE-2010-2642.

...

MAL-2025-47870 Malicious code in vite-plugin-parse-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0c3c9412f03ac4be0712f183133c219efac17d93edf28bf821d9dae53b7856e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...