EUVD-2023-1703

Malicious code in bioql PyPI...

EUVD-2022-3796

Malicious code in bioql PyPI...

EUVD-2023-0365

Malicious code in bioql PyPI...

EUVD-2023-1334

Malicious code in bioql PyPI...

EUVD-2023-0568

Malicious code in bioql PyPI...

EUVD-2022-3816

Malicious code in bioql PyPI...

EUVD-2022-2930

Malicious code in bioql PyPI...

EUVD-2022-42631

Malicious code in bioql PyPI...

EUVD-2021-34041

Malicious code in bioql PyPI...

EUVD-2021-34050

Malicious code in bioql PyPI...

RLSA-2025:10873 Important: java-21-openjdk security update

The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fixes: JDK: Better Glyph drawing CVE-2025-30749 JDK: Enhance TLS protocol support CVE-2025-30754 JDK: Improve HTTP client header handling CVE-2025-50059 JDK: Better...

java-21-openjdk security update

An update is available for java-21-openjdk. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime...

Exploit-Notes

Exploit Notes Exploit Notes is sticky notes for pentesting...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

🛡️ pwnkit-helper - Elevate Your Hacking Skills Safely !Down...

CVE-2025-34207

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to 22.0.1049 and Application prior to 20.0.2786 VA and SaaS deployments configure the SSH client within Docker instances with the following options: UserKnownHostsFile=/dev/null, StrictHostKeyChecking=no, and ForwardAgent yes. These...

CVE-2025-59932 FlagForgeCTF Unauthenticated Resource Modification/Deletion

Flag Forge is a Capture The Flag CTF platform. From versions 2.0.0 to before 2.3.1, the /api/resources endpoint previously allowed POST and DELETE requests without proper authentication or authorization. This could have enabled unauthorized users to create, modify, or delete resources on the...

Malicious code in com.unity.simulation.capture (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47636 Malicious code in com.unity.simulation.capture (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-59826

Flag Forge is a Capture The Flag CTF platform. In version 2.1.0, non-admin users can create arbitrary challenges, potentially introducing malicious, incorrect, or misleading content. This issue has been patched in version 2.2.0...

PT-2025-39418

Name of the Vulnerable Software and Affected Versions Flag Forge versions 2.2.0 through 2.3.0 Description Flag Forge improperly manages session invalidation. After a user logs out, they can still access protected endpoints, such as /api/profile, and CSRF tokens remain valid. This allows continued...