EUVD-2022-0353

Malicious code in bioql PyPI...

EUVD-2022-55129

Malicious code in bioql PyPI...

EUVD-2023-32363

Malicious code in bioql PyPI...

EUVD-2025-25100

Malicious code in bioql PyPI...

EUVD-2021-34353

Malicious code in bioql PyPI...

EUVD-2022-35019

Malicious code in bioql PyPI...

EUVD-2022-4120

Malicious code in bioql PyPI...

EUVD-2025-30276

Malicious code in bioql PyPI...

EUVD-2025-27183

Malicious code in bioql PyPI...

EUVD-2025-11695

Malicious code in bioql PyPI...

EUVD-2025-15156

Malicious code in bioql PyPI...

EUVD-2025-13027

Malicious code in bioql PyPI...

EUVD-2025-26789

Malicious code in bioql PyPI...

EUVD-2024-23047

Malicious code in bioql PyPI...

EUVD-2024-54400

Malicious code in bioql PyPI...

BIT-MONGODB-2024-10921 Improper neutralization of null bytes may lead to buffer over-reads in MongoDB Server

An authorized user may trigger crashes or receive the contents of buffer over-reads of Server memory by issuing specially crafted requests that construct malformed BSON in the MongoDB Server. This issue affects MongoDB Server v5.0 versions prior to 5.0.30 , MongoDB Server v6.0 versions prior to...

CVE-2025-39913

In the Linux kernel, the following vulnerability has been resolved: tcpbpf: Call skmsgfree when tcpbpfsendverdict fails to allocate psock-cork. syzbot reported the splat below. 0 The repro does the following: 1. Load a skmsg prog that calls bpfmsgcorkbytesmsg, corkbytes 2. Attach the prog to a...

Evaluating the Robustness of a Production Malware Detection System to Transferable Adversarial Attacks

As deep learning models become widely deployed as components within larger production systems, their individual shortcomings can create system-level vulnerabilities with real-world impact. This paper studies how adversarial attacks targeting an ML component can degrade or bypass an entire...

SUSE SLES15 / openSUSE 15 Security Update : nginx (SUSE-SU-2025:03444-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03444-1 advisory. - CVE-2025-53859:?the server side may leak arbitrary bytes during the NGINX SMTP authentication process bsc1248070. ...

Windows Shortcut (LNK) Padding

This module generates Windows LNK shortcut file that can execute arbitrary commands. The LNK file uses environment variables and execute its arguments from COMMANDLINEARGUMENTS with extra juicy whitespace character padding bytes and concatenates the actual payload. Module Options msf use...