EUVD-2025-24173

Malicious code in bioql PyPI...

EUVD-2025-24179

Malicious code in bioql PyPI...

EUVD-2022-6904

Malicious code in bioql PyPI...

EUVD-2021-34083

Malicious code in bioql PyPI...

EUVD-2023-27845

Malicious code in bioql PyPI...

EUVD-2024-21105

Malicious code in bioql PyPI...

EUVD-2024-27178

Malicious code in bioql PyPI...

EUVD-2022-5887

Malicious code in bioql PyPI...

EUVD-2022-6679

Malicious code in bioql PyPI...

CVE-2025-57431: Download of Code Without Integrity Check

The Sound4 PULSE-ECO AES67 1.22 web-based management interface is vulnerable to Remote Code Execution RCE via a malicious firmware update package. The update mechanism fails to validate the integrity of manual.sh, allowing an attacker to inject arbitrary commands by modifying this script and...

WordPress plugin Maspik 安全漏洞

WordPress Maspik plugin is an anti-spam plugin for WordPress that is mainly used to protect website contact forms, comment areas and signup forms from spam. WordPress Maspik plugin suffers from an authorization issue vulnerability that stems from a lack of capability check in the function...

CVE-2025-38731

CVE-2025-38731: In the Linux kernel, the drm/xe driver fixes a double-free in xe_vm_bind_ioctl when an array bind argument check fails. The bug freed bind_ops twice; the fix nulls bind_ops after freeing to prevent a second free. Root cause: double-free in xe_vm_bind_ioctl+0x1b2/0x21f0 (KASAN repo...

CVE-2025-38731 drm/xe: Fix vm_bind_ioctl double free bug

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix vmbindioctl double free bug If the argument check during an array bind fails, the bindops are freed twice as seen below. Fix this by setting bindops to NULL after freeing...

An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_lookup_reply.

...

Google Android Information Disclosure Vulnerability (CNVD-2025-19998)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability caused by a lack of permission checking in handleBondStateChanged of AdapterService.java. An attacker can exploit this vulnerability to obtain sensitive...

Linux Distros Unpatched Vulnerability : CVE-2019-12107

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The upnpeventprepare function in upnpevents.c in MiniUPnP MiniUPnPd through 2.1 allows a remote attacker to leak information from the heap due to improper...

elfutils:fuzz-libdwfl: Check failed in CheckUnwind

Detailed Report: https://oss-fuzz.com/testcase?key=5624595337248768 Project: elfutils Fuzzing Engine: libFuzzer Fuzz Target: fuzz-libdwfl Job Type: libfuzzermsanelfutils Platform Id: linux Crash Type: Check failed Crash Address: Crash State: CheckUnwind elfend libdwopenelf Sanitizer: memory MSAN...

CVE-2025-53910

Mattermost Confluence Plugin version 1.5.0 fails to check the access of the user to the channel which allows attackers to create a channel subscription without proper access to the channel via API call to the edit channel subscription endpoint...

CVE-2025-27071: Buffer Copy without Checking Size of Input

Memory corruption while processing specific files in Powerline Communication Firmware...

CVE-2025-47202

In RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400, the lack of a length check leads to out-of-bounds writes...