EUVD-2025-11824

Malicious code in bioql PyPI...

CodeQL zero to hero part 5: Debugging queries

When you're first getting started with CodeQL, you may find yourself in a situation where a query doesn't return the results you expect. Debugging these queries can be tricky, because CodeQL is a Prolog-like language with an evaluation model that's quite different from mainstream languages like...

GHSA-54J7-GRVR-9XWG Command Injection in adb-mcp MCP Server

Command Injection in adb-mcp MCP Server The MCP Server at https://github.com/srmorete/adb-mcp is written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool definition and implementation. The MCP Server is also published publicly to npm at...

The vulnerability of the Debugging component in the integrated development environment for software development, GoLand, allows attackers to execute XXE attacks.

The vulnerability of the Debugging component in the integrated development environment for software development, GoLand, is related to an incorrect limitation on XML references to external objects. Exploiting this vulnerability allows a remote attacker to perform XXE attacks...

The hardware device for controlling electrical circuits, ABB Switch Actuator 4 DU-83330, has vulnerabilities related to insufficient protection of operational data during debugging. This allows attackers to bypass authentication.

The vulnerability of the hardware device for controlling electrical circuits, the ABB Switch Actuator 4 DU-83330, is related to insufficient protection of operational data during the debugging process. Exploiting this vulnerability can allow an attacker to bypass authentication...

The vulnerability of the NVIDIA NVDebug debugging and diagnostic software tool arises from incorrect restrictions on the path to the restricted directory. This allows a malicious actor to gain unauthorized access to protected information or cause service failures.

The vulnerability of the NVIDIA NVDebug debugging and diagnostic software tool is related to incorrect restrictions on the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected...

The vulnerability of embedded software in Qualcomm products relates to the registration of debugging messages during log collection. This allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of embedded Qualcomm software relates to the registration of debugging messages by eSE during log collection. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

The vulnerability of the NVIDIA NVDebug debugging and diagnostic software tool arises from the lack of measures taken to neutralize specific elements. This allows attackers to gain unauthorized access to protected information, enhance their privileges, execute arbitrary code, or cause service failures.

The vulnerability of the NVIDIA NVDebug debugging and diagnostic software lies in the lack of measures taken to neutralize specific elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information, enhance their...

CVE-2023-53403

In the Linux kernel, the following vulnerability has been resolved: time/debug: Fix memory leak with using debugfslookup When calling debugfslookup the result must have dput called on it, otherwise the memory will leak over time. To make things simpler, just call debugfslookupandremove instead...

DEBIAN-CVE-2023-53403

In the Linux kernel, the following vulnerability has been resolved: time/debug: Fix memory leak with using debugfslookup When calling debugfslookup the result must have dput called on it, otherwise the memory will leak over time. To make things simpler, just call debugfslookupandremove instead...

CVE-2023-53403 time/debug: Fix memory leak with using debugfs_lookup()

In the Linux kernel, the following vulnerability has been resolved: time/debug: Fix memory leak with using debugfslookup When calling debugfslookup the result must have dput called on it, otherwise the memory will leak over time. To make things simpler, just call debugfslookupandremove instead...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the blkgiostatset structure not reinitializing the blkg and sync fields after being cleared in...

CVE-2025-57452

In realme BackupRestore app v15.1.122810c08250314, improper URI scheme handling in com.coloros.pc.PcToolMainActivity allows local attackers to cause a crash and potential XSS via crafted ADB intents...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the deletion of uninitialized timers, which could lead to debugging warnings and system instability...

GHSA-2GG8-85M5-8R2P Chaos Mesh's Chaos Controller Manager is Missing Authentication for Critical Function

The Chaos Controller Manager in Chaos Mesh exposes a GraphQL debugging server without authentication to the entire Kubernetes cluster, which provides an API to kill arbitrary processes in any Kubernetes pod, leading to cluster-wide denial of service...

CVE-2025-59358 Denial of Service via Unauthorized Access to Chaos Mesh debugging server

The Chaos Controller Manager in Chaos Mesh exposes a GraphQL debugging server without authentication to the entire Kubernetes cluster, which provides an API to kill arbitrary processes in any Kubernetes pod, leading to cluster-wide denial of service...

CVE-2025-59358

The CVE-2025-59358 entry is linked to Chaos Mesh: the Chaos Controller Manager exposes a GraphQL debugging server without authentication, reachable across the Kubernetes cluster. This misconfiguration permits an attacker to access an API capable of killing arbitrary processes in any pod, leading ...

CVE-2025-59358 Denial of Service via Unauthorized Access to Chaos Mesh debugging server

The Chaos Controller Manager in Chaos Mesh exposes a GraphQL debugging server without authentication to the entire Kubernetes cluster, which provides an API to kill arbitrary processes in any Kubernetes pod, leading to cluster-wide denial of service...

CVE-2025-59358: Missing Authentication for Critical Function

The Chaos Controller Manager in Chaos Mesh exposes a GraphQL debugging server without authentication to the entire Kubernetes cluster, which provides an API to kill arbitrary processes in any Kubernetes pod, leading to cluster-wide denial of service...

Chaos Mesh 访问控制错误漏洞

Chaos Mesh is an open source cloud-native engineering platform from Chaos Mesh Open Source. Chaos Mesh suffers from an Access Control Error vulnerability that stems from an unauthenticated GraphQL debugging server being exposed to the entire Kubernetes cluster, potentially resulting in a...