EUVD-2021-10813

Malware in sbrugna...

EUVD-2020-28429

Malware in sbrugna...

EUVD-2021-18720

Malware in sbrugna...

CVE-2025-62185

In Ankitects Anki prior to 25.02.5, a crafted shared deck can place a YouTube downloader executable (names include youtube-dl.exe, yt-dlp.exe, or yt-dlp_x86.exe) in the media folder. This executable can be run when a YouTube link is present in the deck, enabling potential arbitrary code execution...

CVE-2025-11312

A vulnerability was detected in Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 1.0. This affects the function findModulePage of the file findModulePage.do. The manipulation of the argument sort results in sql injection. The attack can be launched remotely. The exploit is now public...

EUVD-2024-50413

Malicious code in bioql PyPI...

EUVD-2023-2146

Malicious code in bioql PyPI...

EUVD-2023-2858

Malicious code in bioql PyPI...

EUVD-2023-54658

Malicious code in bioql PyPI...

EUVD-2024-34170

Malicious code in bioql PyPI...

EUVD-2024-50414

Malicious code in bioql PyPI...

EUVD-2024-1216

Malicious code in bioql PyPI...

EUVD-2023-2412

Malicious code in bioql PyPI...

EUVD-2023-12460

Malicious code in bioql PyPI...

EUVD-2022-34599

Malicious code in bioql PyPI...

CVE-2025-5942

Netskope was notified about a potential gap in its agent NS Client on Windows systems. If this gap is successfully exploited, an unprivileged user can trigger a heap overflow in the epdlpdrv.sys driver, leading to a Blue-Screen-of-Death BSOD. Successful exploitation can also potentially be...

Malicious code in wavy-dlp (npm)

The package wavy-dlp was found to contain malicious code...

MAL-2025-38926 Malicious code in wavy-dlp (npm)

The package wavy-dlp was found to contain malicious code...

CVE-2025-5942 Heap Overflow in Netskope Endpoint DLP Driver

Netskope was notified about a potential gap in its agent NS Client on Windows systems. If this gap is successfully exploited, an unprivileged user can trigger a heap overflow in the epdlpdrv.sys driver, leading to a Blue-Screen-of-Death BSOD. Successful exploitation can also potentially be...

Linux Distros Unpatched Vulnerability : CVE-2024-22423

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - yt-dlp is a youtube-dl fork with additional features and fixes. The patch that addressed CVE-2023-40581 attempted to prevent RCE when using --exec with %q by...