5903 matches found
EUVD-2023-27025
Malicious code in bioql PyPI...
EUVD-2023-43158
Malicious code in bioql PyPI...
EUVD-2023-36621
Malicious code in bioql PyPI...
EUVD-2023-44970
Malicious code in bioql PyPI...
CVE-2025-33040
creationtimestamp| type| source ---|---|--- 2025-10-03 19:05:14+00:00| seen| Telegram/MjtUVDFp9ShDIVgXf0GJKqIb2fdYEwBTr3w3nbRU43i-cSw...
CVE-2025-53859 affecting package nginx for versions less than 1.22.1-14
CVE-2025-53859 affecting package nginx for versions less than 1.22.1-14. A patched version of the package is available...
CVE-2025-3770 affecting package hvloader for versions less than 1.0.1-14
CVE-2025-3770 affecting package hvloader for versions less than 1.0.1-14. A patched version of the package is available...
CVE-2025-59688
creationtimestamp| type| source ---|---|--- 2025-10-01 14:26:35+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3m25anv4bvs2n...
CVE-2025-35033
Medical Informatics Engineering Enterprise Health has a CSV injection vulnerability that allows a remote, authenticated attacker to inject macros in downloadable CSV files. This issue is fixed as of 2025-03-14...
CVE-2025-57852
creationtimestamp| type| source ---|---|--- 2025-09-30 14:59:45+00:00| seen| Telegram/tzVVVEZnRF-Acx-BoJjqTYV8V4SsWMswzNbeAD4WdU506s...
CVE-2025-35034
Medical Informatics Engineering Enterprise Health is affected by a reflected cross-site scripting vulnerability in the portlet_user_id URL parameter. A remote, unauthenticated attacker can craft a URL to execute arbitrary JavaScript in a victim’s browser. The issue is fixed as of 2025-03-14. Acco...
CVE-2025-60145
creationtimestamp| type| source ---|---|--- 2025-09-26 14:52:22+00:00| seen| Telegram/eTLEXlljChv1C5hZ20Zr6KVoPbX6xywqhAiUz5Yjoe2O0ls...
CVE-2025-23275
creationtimestamp| type| source ---|---|--- 2025-09-24 14:52:17+00:00| seen| Telegram/ctBSGJXpoYCdLxxm3D0Vf4GidzxXMbr3w7kQnvvLRi0HZK8...
CVE-2023-53395
creationtimestamp| type| source ---|---|--- 2025-09-18 14:46:58+00:00| seen| https://bsky.app/profile/potato.software/post/3lz4lqhad4w2q...
Security update for curl
This update for curl fixes the following issues: Security issues fixed: CVE-2025-9086: bug in patch comparison logic when processing cookies can lead to out-of-bounds read in heap buffer bsc1249191. CVE-2025-10148: predictable websocket mask can lead to proxy cache poisoning by malicious server...
CVE-2025-6947
creationtimestamp| type| source ---|---|--- 2025-09-16 14:42:48+00:00| seen| Telegram/AVaNMIcgVwkeFroUybKpwrMupIBtRG8mYeU-hbveQm8kWQ0...
CVE-2025-39824
creationtimestamp| type| source ---|---|--- 2025-09-16 14:30:09+00:00| seen| https://gist.github.com/Darkcrai86/25dc5a4661d805e371caa2e7b3ac4094 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen|...
CVE-2023-53223
creationtimestamp| type| source ---|---|--- 2025-09-15 14:39:49+00:00| seen| Telegram/oTPOrhpQAqay1B-bVmew1mE5nY6UFCs18Oe1YQTKnVh-ys...
CVE-2025-52048
Frappe CVE-2025-52048 affects Frappe 15.x.x prior to 15.72.0 and 14.x.x prior to 14.96.10. The vulnerability is a SQL Injection in the add_tag() function located at frappe/desk/doctype/tag/tag.py, where the dt parameter can be exploited to extract data from the database. Remediation: upgrade to F...