EUVD-2025-14785

Malicious code in bioql PyPI...

EUVD-2024-22203

Malicious code in bioql PyPI...

EUVD-2022-1037

Malicious code in bioql PyPI...

CVE-2025-10728

When the module renders a Svg file that contains a element, it might end up rendering it recursively leading to stack overflow DoS...

CVE-2025-10728 Uncontrolled recursion in Qt SVG module

When the module renders a Svg file that contains a element, it might end up rendering it recursively leading to stack overflow DoS...

CVE-2025-10728 Uncontrolled recursion in Qt SVG module

When the module renders a Svg file that contains a element, it might end up rendering it recursively leading to stack overflow DoS...

PC-Doctor Toolbox before 7.3 has an Uncontrolled Search Path Element.

...

Notepad++ Uncontrolled Element Code Execution

The vulnerability of the Notepad++ text editor is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow a hacker to execute arbitrary code...

CVE-2023-53467

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix potential leak in rtw89appendprobereqie Do kfreeskbnew before goto out to prevent potential leak...

CVE-2025-10948

A vulnerability has been found in MikroTik RouterOS 7. This affects the function parsejsonelement of the file /rest/ip/address/print of the component libjson.so. The manipulation leads to buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to the...

CVE-2025-10948

A vulnerability has been found in MikroTik RouterOS 7. This affects the function parsejsonelement of the file /rest/ip/address/print of the component libjson.so. The manipulation leads to buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to the...

CVE-2025-10948 MikroTik RouterOS libjson.so print parse_json_element buffer overflow

A vulnerability has been found in MikroTik RouterOS 7. This affects the function parsejsonelement of the file /rest/ip/address/print of the component libjson.so. The manipulation leads to buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to the...

Arbitrary File Upload

xml2rfc is vulnerable to Arbitrary File Upload. The vulnerability is due to improper input sanitization because an attacker can inject a malicious element into the XML used to generate the PDF, causing the generator to read and include arbitrary filesystem files...

CVE-2025-9844

Uncontrolled Search Path Element vulnerability in Salesforce Salesforce CLI on Windows allows Replace Trusted Executable.This issue affects Salesforce CLI: before 2.106.6...

CVE-2025-9844

The Salesforce CLI on Windows is vulnerable to an Uncontrolled Search Path Element vulnerability in versions prior to 2.106.6 . This flaw allows an attacker to execute arbitrary code by placing a malicious executable in a directory searched before the intended trusted executable, potentially lead...

CVE-2025-9844: Uncontrolled Search Path Element

Uncontrolled Search Path Element vulnerability in Salesforce Salesforce CLI on Windows allows Replace Trusted Executable.This issue affects Salesforce CLI: before 2.106.6...

Incorrect handling of embedded SVG and MathML leads to mutation XSS after removal

Affected versions of this crate did not correctly strip namespace-incompatible tags in certain situations, causing it to incorrectly account for differences between HTML, SVG, and MathML. This vulnerability only has an effect when the svg or math tag is allowed, because it relies on a tag being...

Intel oneAPI Toolkit Uncontrolled Element

The vulnerability of the Intel oneAPI Toolkit’s software development tools is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

element-web-1.11.112-1.1 on GA media (moderate)

element-web-1.11.112-1.1 on GA media Announcement ID: openSUSE-SU-2025:15559-1 Rating: moderate Cross-References: CVE-2025-59161 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

CVE-2025-59332

3DAlloy is a lightWeight 3D-viewer for MediaWiki. From 1.0 through 1.8, the parser tag and the 3d parser function allow users to provide custom attributes that are then appended to the canvas HTML element that is being output by the extension. The attributes are not sanitized, which means that...