4772 matches found
EUVD-2025-7164
Malicious code in bioql PyPI...
EUVD-2025-7172
Malicious code in bioql PyPI...
EUVD-2023-34134
Malicious code in bioql PyPI...
EUVD-2024-45216
Malicious code in bioql PyPI...
EUVD-2025-11358
Malicious code in bioql PyPI...
EUVD-2025-5511
Malicious code in bioql PyPI...
EUVD-2022-25226
Malicious code in bioql PyPI...
EUVD-2024-48759
Malicious code in bioql PyPI...
EUVD-2025-21288
Malicious code in bioql PyPI...
EUVD-2021-6574
Malicious code in bioql PyPI...
EUVD-2023-51275
Malicious code in bioql PyPI...
EUVD-2023-53730
Malicious code in bioql PyPI...
CVE-2023-50300
IBM Transformation Extender Advanced 10.0.1 could allow a local user to perform unauthorized actions due to improper access controls...
[SECURITY] Fedora 42 Update: freeipa-4.12.5-2.fc42
IPA is an integrated solution to provide centrally managed Identity users, hosts, services, Authentication SSO, 2FA, and Authorization host access control, SELinux user roles, services. The solution provides features for further integration with Linux based clients SUDO, automount and integration...
redis,valkey -- Lua Use-After-Free may lead to remote code execution
redis reports: An authenticated user may use a specially crafted Lua script to manipulate the garbage collector, trigger a use-after-free and potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting. An additional workaround to mitigate the problem...
netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions
A flaw in Netty’s HTTP/1.1 chunked encoding parser allows newline LF characters in chunk extensions to be incorrectly treated as the end of the chunk-size line instead of requiring the proper CRLF sequence. This discrepancy can be exploited in rare cases where a reverse proxy interprets the same...
netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions
A flaw in Netty’s HTTP/1.1 chunked encoding parser allows newline LF characters in chunk extensions to be incorrectly treated as the end of the chunk-size line instead of requiring the proper CRLF sequence. This discrepancy can be exploited in rare cases where a reverse proxy interprets the same...
A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.
...
