EUVD-2023-31747

Malicious code in bioql PyPI...

EUVD-2025-15947

Malicious code in bioql PyPI...

EUVD-2025-22883

Malicious code in bioql PyPI...

EUVD-2022-34788

Malicious code in bioql PyPI...

EUVD-2023-48748

Malicious code in bioql PyPI...

EUVD-2023-54427

Malicious code in bioql PyPI...

EUVD-2022-41609

Malicious code in bioql PyPI...

EUVD-2023-45730

Malicious code in bioql PyPI...

Neon App pays users to record their phone calls, sells data for AI training [updated]

TechCrunch reports about a “bizarre app” inviting you to record and share your audio calls so that it can sell the data to AI companies. And if that’s not weird enough on its own, it’s ranking No. 2 in Apple's US app store at the time of writing. The name of the app is Neon Mobile and it promises...

CVE-2025-47326

Transient DOS while handling command data during power control processing...

CVE-2025-47326

Transient DOS while handling command data during power control processing...

CVE-2025-47326

CVE-2025-47326 is described in the CVE ecosystem as a Transient DoS issue related to processing of command data during power control, with the CVE-List entry specifically noting a Buffer Over-read in the WLAN HAL. The connected entries indicate this affects Qualcomm components (including WLAN HAL...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from improper handling of command data during power control processing, which could result in a denial of service...

Security Bulletin: IBM Watsonx BI is affected by use of on-headers in node.js middleware used for listening when a response writes headers

Summary IBM Watsonx BI is affected by use of on-headers in node.js middleware used for listening when a response writes headers. It has a bug in on-headers versions 1.1.0 may result in response headers being inadvertently modified when an array is passed to response.writeHead Vulnerability Detail...

GHSA-7C3F-CG9X-F3GR JasperReports has a Java deserialisation vulnerability

A Java deserialisation vulnerability has been discovered in the Jaspersoft Library. Improper handling of externally supplied data may allow attackers to execute arbitrary code remotely on systems that use the affected library...

CVE-2025-10492 Jaspersoft Library Deserialisation Vulnerability

A Java deserialisation vulnerability has been discovered in Jaspersoft Library. Improper handling of externally supplied data may allow attackers to execute arbitrary code remotely on systems that use the affected library...

Jaspersoft Library 安全漏洞

Jaspersoft Library is a Java library from the Jaspersoft community. A security vulnerability exists in Jaspersoft Library that stems from improper handling of externally supplied data and could lead to the remote execution of arbitrary code...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems from the U.S.-based Apple Inc. developed specifically for Mac computers. A security vulnerability exists in Apple macOS that stems from insufficient editing of private data in log entries, which could result in an application accessing conta...

com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError

A nested data handling flaw was found in Jackson Core. When parsing particularly deeply nested data structures, a StackoverflowError can occur...

SAP Supplier Relationship Management Cross-Site Scripting Vulnerability (CNVD-2025-21206)

SAP Supplier Relationship Management SRM is a supplier relationship management solution from SAP. The product automates purchasing and acquisition processes within an organization and between suppliers, and provides functions such as invoicing. A cross-site scripting vulnerability exists in SAP...