EUVD-2024-27178

Malicious code in bioql PyPI...

EUVD-2025-22264

Malicious code in bioql PyPI...

EUVD-2022-4238

Malicious code in bioql PyPI...

EUVD-2023-33979

Malicious code in bioql PyPI...

EUVD-2022-47385

Malicious code in bioql PyPI...

EUVD-2023-57732

Malicious code in bioql PyPI...

EUVD-2022-47375

Malicious code in bioql PyPI...

EUVD-2022-25848

Malicious code in bioql PyPI...

EUVD-2022-2603

Malicious code in bioql PyPI...

EUVD-2024-22944

Malicious code in bioql PyPI...

EUVD-2022-6362

Malicious code in bioql PyPI...

EUVD-2022-0331

Malicious code in bioql PyPI...

EUVD-2023-43898

Malicious code in bioql PyPI...

EUVD-2022-2815

Malicious code in bioql PyPI...

EUVD-2022-6876

Malicious code in bioql PyPI...

WordPress plugin Maspik 安全漏洞

WordPress Maspik plugin is an anti-spam plugin for WordPress that is mainly used to protect website contact forms, comment areas and signup forms from spam. WordPress Maspik plugin suffers from an authorization issue vulnerability that stems from a lack of capability check in the function...

CVE-2025-38731

CVE-2025-38731: In the Linux kernel, the drm/xe driver fixes a double-free in xe_vm_bind_ioctl when an array bind argument check fails. The bug freed bind_ops twice; the fix nulls bind_ops after freeing to prevent a second free. Root cause: double-free in xe_vm_bind_ioctl+0x1b2/0x21f0 (KASAN repo...

CVE-2025-38731 drm/xe: Fix vm_bind_ioctl double free bug

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix vmbindioctl double free bug If the argument check during an array bind fails, the bindops are freed twice as seen below. Fix this by setting bindops to NULL after freeing...

An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_lookup_reply.

...

Google Android Information Disclosure Vulnerability (CNVD-2025-19998)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability caused by a lack of permission checking in handleBondStateChanged of AdapterService.java. An attacker can exploit this vulnerability to obtain sensitive...