EUVD-2023-55083

Malicious code in bioql PyPI...

EUVD-2025-10290

Malicious code in bioql PyPI...

EUVD-2025-4890

Malicious code in bioql PyPI...

EUVD-2022-2376

Malicious code in bioql PyPI...

EUVD-2022-7038

Malicious code in bioql PyPI...

CVE-2025-48924 affecting package apache-commons-lang3 for versions less than 3.8.1-6

CVE-2025-48924 affecting package apache-commons-lang3 for versions less than 3.8.1-6. A patched version of the package is available...

CVE-2025-61668 @plone/volto vulnerable to potential DoS by invoking specific URL by anonymous user

Volto is a ReactJS-based frontend for the Plone Content Management System. Versions 16.34.0 and below, 17.0.0 through 17.22.1, 18.0.0 through 18.27.1, and 19.0.0-alpha.1 through 19.0.0-alpha.5, an anonymous user could cause the NodeJS server part of Volto to quit with an error when visiting a...

CVE-2023-28760: Stack-based Buffer Overflow

TP-Link AX1800 WiFi 6 Router Archer AX21 devices allow unauthenticated attackers on the LAN to execute arbitrary code as root via the dbdir field to minidlnad. The attacker obtains the ability to modify files.db, and that can be used to reach a stack-based buffer overflow in...

Apple Security Update: watchOS 26.0.2

Apple recommends to install security update watchOS 26.0.2 on devices Apple Watch Series 6 and later...

AZL-67928 CVE-2025-11082 affecting package gdb for versions less than 13.2-6

A flaw has been found in GNU Binutils 2.45. Impacted is the function bfdelfparseehframe of the file bfd/elf-eh-frame.c of the component Linker. Executing manipulation can lead to heap-based buffer overflow. The attack is restricted to local execution. The exploit has been published and may be use...

CVE-2024-11738 affecting package rust for versions less than 1.86.0-6

CVE-2024-11738 affecting package rust for versions less than 1.86.0-6. A patched version of the package is available...

CVE-2025-59040 Tuleap backlog item representations do not verify the permissions of the child trackers

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Backlog item representations do not verify the permissions of the child trackers. Users might see tracker names they should not have access to. This vulnerability is fixed in Tuleap Community Edition...

Enalean Tuleap Community Edition和Enalean Tuleap Enterprise Edition 安全漏洞

Enalean Tuleap Community Edition and Enalean Tuleap Enterprise Edition are both an open source suite from Enalean Open Source designed to improve the management of software development and collaboration. A security vulnerability exists in Tuleap Community Edition version 16.11.99.1757427600 and...

CVE-2025-57579: Use of Hard-coded Credentials

An issue in TOTOLINK Wi-Fi 6 Router Series Device X2000R-Gh-V2.0.0 allows a remote attacker to execute arbitrary code via the default password...

Linux Distros Unpatched Vulnerability : CVE-2017-0550

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. Thi...

Linux Distros Unpatched Vulnerability : CVE-2016-0840

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple stack-based buffer underflows in decoder/ih264dparsecavlc.c in mediaserver in Android 6.x before 2016-04-01 allow remote attackers to execute arbitrary...

WordPress Wilmer Core plugin <= 2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by István Márton in WordPress Plugin Wilmer Core versions = 2.4.5...

Malicious code in @zalastax/nolb-lion-lib-6 (npm)

The package @zalastax/nolb-lion-lib-6 was found to contain malicious code...

CVE-2025-48924 affecting package apache-commons-lang3 for versions less than 3.8.1-6

CVE-2025-48924 affecting package apache-commons-lang3 for versions less than 3.8.1-6. A patched version of the package is available...

RHEL 8 / 9 : Satellite 6.16.5.3 Async Update (Moderate) (RHSA-2025:15124)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:15124 advisory. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to...