EUVD-2025-26438

Malicious code in bioql PyPI...

@akaiv/core (>=1.2.6 <=1.8.3), @akaiv/discord-client (>=1.0.0 <=1.4.1) +3 more potentially affected by unknown CVE via minimst (=0.0.1-security)

minimst NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on minimst and may be impacted: - @akaiv/core =1.2.6, =1.0.0, =0.1.0, =0.4.0 - @akaiv/kakao-client =2.0.1 - netlify-minutes =0.1.0 Source cves: unknown CVE Source advisory...

CVE-2025-26438

creationtimestamp| type| source ---|---|--- 2025-07-30 07:59:24+00:00| seen| https://vulnerability.circl.lu/bundle/9d7fef5d-952d-4ecc-880d-94d02304e7a3 2025-09-04 18:46:12+00:00| seen| https://gist.github.com/Darkcrai86/471589d8b643443d5e285b6afdc862df 2025-09-04 22:50:32+00:00| seen|...

PT-2025-19992

Name of the Vulnerable Software and Affected Versions: bta av aact.cc affected versions not specified Description: An out-of-bounds read due to type confusion exists in the bta av config ind function of bta av aact.cc. This could lead to local information disclosure and does not require additiona...

PT-2025-19994

Name of the Vulnerable Software and Affected Versions: smp act.cc affected versions not specified Description: An incorrect implementation of a protocol in the smp process secure connection oob data function within smp act.cc may allow bypassing SMP authentication. This could lead to remote...

CVE-2023-26438

creationtimestamp| type| source ---|---|--- 2023-08-02 16:39:23+00:00| seen| https://t.me/cibsecurity/67582...

CVE-2023-26438

CVE-2023-26438 describes a time-of-check/time-of-use (TOCTOU) weakness in external service lookups tied to the JDK DNS cache. Attackers timing DNS cache expiry could inject configurations to bypass existing network deny-lists and discover restricted infrastructure or service availability. The cor...

CVE-2022-26438

CVE-2022-26438 affects the wifi driver and is caused by a missing bounds check that enables an out-of-bounds write. This can lead to local privilege escalation with System execution privileges required; exploitation does not require user interaction. Public references indicate a patch ID GN202204...