EUVD-2024-47432

Malicious code in bioql PyPI...

EUVD-2022-30761

Malicious code in bioql PyPI...

EUVD-2024-37575

Malicious code in bioql PyPI...

EUVD-2024-35556

Malicious code in bioql PyPI...

EUVD-2023-29798

Malicious code in bioql PyPI...

EUVD-2024-35082

Malicious code in bioql PyPI...

EUVD-2024-36754

Malicious code in bioql PyPI...

EUVD-2025-25874

Malicious code in bioql PyPI...

EUVD-2025-3918

Malicious code in bioql PyPI...

CVE-2025-5918 affecting package libarchive for versions less than 3.6.1-7

CVE-2025-5918 affecting package libarchive for versions less than 3.6.1-7. A patched version of the package is available...

CVE-2025-5917 affecting package libarchive for versions less than 3.6.1-7

CVE-2025-5917 affecting package libarchive for versions less than 3.6.1-7. A patched version of the package is available...

CVE-2025-5916 affecting package libarchive for versions less than 3.6.1-7

CVE-2025-5916 affecting package libarchive for versions less than 3.6.1-7. A patched version of the package is available...

WordPress W3SCloud Contact Form 7 to Zoho CRM plugin <= 3.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin W3SCloud Contact Form 7 to Zoho CRM versions = 3.2...

Oracle Linux 7 : aide (ELSA-2025-15728)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2025-15728 advisory. 0.15.1-13.0.3 - aide security update CVE-2025-54389 Orabug: 38427919 Tenable has extracted the preceding description block directly from the Oracle Linux...

CVE-2025-10948

A vulnerability has been found in MikroTik RouterOS 7. This affects the function parsejsonelement of the file /rest/ip/address/print of the component libjson.so. The manipulation leads to buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to the...

CVE-2025-10948

CVE-2025-10948 affects MikroTik RouterOS 7, specifically the parse_json_element function in the libjson.so component used by /rest/ip/address/print. The issue is a remote-exploitable buffer overflow reported in multiple feeds, with public disclosure of the exploit. The vulnerability is stated to ...

This Week in Spring - September 23rd, 2025

Hi, Spring fans! Welcome to another installment of This Week in Spring! I'm preparing my talks for several amazing shows including: Commit Your Code conference in Plano, Texas starting tomorrow; Dev2Next in Colorado; Devoxx Belgium in Antwerp, Belgium; and CloudFoundry Days in Germany. So much go...

CVE-2023-44487 affecting package grpc for versions less than 1.42.0-7

CVE-2023-44487 affecting package grpc for versions less than 1.42.0-7. A patched version of the package is available...

RHEL 7 : postgresql (RHSA-2025:16099)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:16099 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL code execution in restore...

Oracle Linux 7 : libarchive (ELSA-2025-14828)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-14828 advisory. 3.1.2-14.0.1 - rar: Fix double free Orabug: 38364091CVE-2025-5914 Tenable has extracted the preceding description block directly from the Oracle Linux security...