EUVD-2025-28032

Malicious code in bioql PyPI...

EUVD-2025-25696

Malicious code in bioql PyPI...

EUVD-2025-25705

Malicious code in bioql PyPI...

EUVD-2025-25586

Malicious code in bioql PyPI...

EUVD-2025-25584

Malicious code in bioql PyPI...

EUVD-2025-21971

Malicious code in bioql PyPI...

EUVD-2025-9297

Malicious code in bioql PyPI...

EUVD-2022-45112

Malicious code in bioql PyPI...

EUVD-2023-27645

Malicious code in bioql PyPI...

EUVD-2025-6459

Malicious code in bioql PyPI...

EUVD-2023-45730

Malicious code in bioql PyPI...

thunderbird security update

An update is available for thunderbird. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Thunderbird is a standalone mail and newsgroup client. Security...

efax 0.9 and earlier, when installed setuid root, allows local users to read arbitrary files via the -d option, which prints the contents of the file in a warning message.

...

Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation 24.0.1-IF005 (September 2025)

Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Cloud Pak for Business Automation 24.0.1-IF005. Vulnerability Details CVEID:CVE-2025-30204 DESCRIPTION: golang-jwt is a Go implementation of JSON Web Tokens...

KLA88567 DoS vulnerabilities in Mozilla Firefox

Denial of service vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. Out of bounds memory read vulnerability in JIT Codegen Extensions can be exploited to cause denial of...

PT-2025-41184

Name of the Vulnerable Software and Affected Versions D-Link DI-7001 MINI version 24.04.18B1 Description A security issue exists in D-Link DI-7001 MINI. Manipulation of the str argument within an unknown function of the /dbsrv.asp file can lead to a buffer overflow. This issue may be exploited...

CVE-2025-11100

A vulnerability was identified in D-Link DIR-823X 250416. This affects the function uciset of the file /goform/setwifiblacklists. Such manipulation leads to command injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used...

CVE-2025-11099

A vulnerability was determined in D-Link DIR-823X 250416. The impacted element is the function ucidel of the file /goform/deleteprohibiting. This manipulation of the argument delvalue causes command injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed...

CVE-2025-11097

A vulnerability has been found in D-Link DIR-823X 250416. Impacted is an unknown function of the file /goform/setdevicename. The manipulation of the argument mac leads to command injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be...

CVE-2025-11096

A flaw has been found in D-Link DIR-823X 250416. This issue affects some unknown processing of the file /goform/diagtraceroute. Executing manipulation of the argument targetaddr can lead to command injection. The attack can be executed remotely. The exploit has been published and may be used...