EUVD-2022-29562

Malicious code in bioql PyPI...

EUVD-2022-52553

Malicious code in bioql PyPI...

EUVD-2025-9401

Malicious code in bioql PyPI...

EUVD-2022-42687

Malicious code in bioql PyPI...

EUVD-2022-39573

Malicious code in bioql PyPI...

EUVD-2022-38819

Malicious code in bioql PyPI...

EUVD-2021-3610

Malicious code in bioql PyPI...

EUVD-2022-42317

Malicious code in bioql PyPI...

EUVD-2025-18399

Malicious code in bioql PyPI...

EUVD-2021-6473

Malicious code in bioql PyPI...

EUVD-2025-30222

Malicious code in bioql PyPI...

EUVD-2021-3168

Malicious code in bioql PyPI...

PT-2025-37725

Name of the Vulnerable Software and Affected Versions Liferay Portal versions 7.3 GA through update 35 Liferay Portal versions 7.4.0 through 7.4.3.105 Liferay DXP versions 2023.Q3.1 through 2023.Q3.4 Liferay DXP version 2023.Q4.0 Liferay Portal versions 7.4 GA through update 92 Description The...

Linux Distros Unpatched Vulnerability : CVE-2021-22169

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was identified in GitLab EE 13.4 or later which leaked internal IP address via error messages. CVE-2021-22169 Note that Nessus relies on the presence o...

curl: curl leaks destination IP via glibc getaddrinfo() UDP connect, bypassing SOCKS5/Tor

Summary: When using curl with a SOCKS5 proxy e.g. Tor on 127.0.0.1:9050, glibc getaddrinfo performs direct UDP connect probes to the target’s IP:443. These syscalls bypass the proxy and expose the user’s route to the destination, breaking anonymity expectations. The IPs I got in my case:...

Linux Distros Unpatched Vulnerability : CVE-2023-36673

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Avira Phantom VPN through 2.23.1 for macOS. The VPN client insecurely configures the operating system such that all IP traffic to the...

Linux Distros Unpatched Vulnerability : CVE-2023-29538

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Under specific circumstances a WebExtension may have received a jar:file:/// URI instead of a moz-extension:/// URI during a load request. This leaked directory...

CVE-2025-49134

Weblate is a web based localization tool. Prior to version 5.12, the audit log notifications included the full IP address of the acting user. This could be obtained by third-party servers such as SMTP relays, or spam filters. This issue has been patched in version 5.12...

kernel: vlan: enforce underlying device type

In the Linux kernel, the following vulnerability has been resolved: vlan: enforce underlying device type Currently, VLAN devices can be created on top of non-ethernet devices. Besides the fact that it doesn't make much sense, this also causes a bug which leaks the address of a kernel function to...

CVE-2023-38302

A certain software build for the Sharp Rouvo V device SHARP/VZWSTTM21VAPP/STTM21VAPP:12/SP1A.210812.016/1KN00530:user/release-keys leaks the Wi-Fi MAC address and the Bluetooth MAC address to system properties that can be accessed by any local app on the device without any permissions or special...