EUVD-2020-20279

Malware in sbrugna...

EUVD-2020-20273

Malware in sbrugna...

CVE-2025-61685 Mastra Docs MCP Server `@mastra/mcp-docs-server` Leads to Information Exposure

Mastra is a Typescript framework for building AI agents and assistants. Versions 0.13.8 through 0.13.20-alpha.0 are vulnerable to a Directory Traversal attack that results in the disclosure of directory listings. The code contains a security check to prevent path traversal for reading file...

CVE-2025-61685 Mastra Docs MCP Server `@mastra/mcp-docs-server` Leads to Information Exposure

Mastra is a Typescript framework for building AI agents and assistants. Versions 0.13.8 through 0.13.20-alpha.0 are vulnerable to a Directory Traversal attack that results in the disclosure of directory listings. The code contains a security check to prevent path traversal for reading file...

EUVD-2023-36157

Malicious code in bioql PyPI...

EUVD-2024-43285

Malicious code in bioql PyPI...

EUVD-2023-55790

Malicious code in bioql PyPI...

EUVD-2022-0298

Malicious code in bioql PyPI...

EUVD-2023-32132

Malicious code in bioql PyPI...

EUVD-2024-19530

Malicious code in bioql PyPI...

EUVD-2024-17692

Malicious code in bioql PyPI...

EUVD-2022-49445

Malicious code in bioql PyPI...

EUVD-2025-21388

Malicious code in bioql PyPI...

EUVD-2023-27732

Malicious code in bioql PyPI...

EUVD-2024-43211

Malicious code in bioql PyPI...

CVE-2025-57852 Openshift-ai: privilege escalation via excessive /etc/passwd permissions

A container privilege escalation flaw was found in KServe ModelMesh container images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a...

Security update for python-pycares

This update for python-pycares fixes the following issues: Update to version 4.10.0 jscPED-13442: CVE-2025-48945: Fixed use-after-free vulnerability may have led to a crash bsc1244691. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

CVE-2025-9494

An OS command injection vulnerability has been discovered in the Vitogate 300, which can be exploited by malicious users to compromise affected installations. Specifically, the /cgi-bin/vitogate.cgi endpoint is affected, when the form JSON parameter is set to form-0-2. The vulnerability stems fro...

CVE-2025-9494

An OS command injection vulnerability has been discovered in the Vitogate 300, which can be exploited by malicious users to compromise affected installations. Specifically, the /cgi-bin/vitogate.cgi endpoint is affected, when the form JSON parameter is set to form-0-2. The vulnerability stems fro...

CVE-2025-9494 Viessmann Vitogate 300 OS Command Injection

An OS command injection vulnerability has been discovered in the Vitogate 300, which can be exploited by malicious users to compromise affected installations. Specifically, the /cgi-bin/vitogate.cgi endpoint is affected, when the form JSON parameter is set to form-0-2. The vulnerability stems fro...