EUVD-2025-15974

Malicious code in bioql PyPI...

EUVD-2025-26941

Malicious code in bioql PyPI...

EUVD-2025-19321

Malicious code in bioql PyPI...

EUVD-2025-15968

Malicious code in bioql PyPI...

EUVD-2025-19323

Malicious code in bioql PyPI...

EUVD-2025-19226

Malicious code in bioql PyPI...

EUVD-2025-18509

Malicious code in bioql PyPI...

CVE-2023-53392

In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: Fix kernel panic during warm reset During warm reset device-fwclient is set to NULL. If a bus driver is registered after this NULL setting and before new firmware clients are enumerated by ISHTP, kernel panic...

UBUNTU-CVE-2023-53422

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fw: fix memory leak in debugfs Fix a memory leak that occurs when reading the fwinfo file all the way, since we return NULL indicating no more data, but don't free the status tracking object...

PT-2025-38441

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains an issue where a memory leak occurs when reading the fw info file completely, as the status tracking object is not freed after returning NULL, indicating no...

PT-2025-42265

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s ath11k module related to a NULL dereference within the ath11k qmi m3 load function. Specifically, if ab-fw.m3 data points to data, the fw pointer can...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to properly handle fwclient references after a device reset, which could lead to a kernel panic...

SUSE CVE-2025-39832

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix lockdep assertion on sync reset unload event Fix lockdep assertion triggered during sync reset unload event. When the sync reset flow is initiated using the devlink reload fwactivate option, the PF already holds the...

CVE-2025-39832

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix lockdep assertion on sync reset unload event Fix lockdep assertion triggered during sync reset unload event. When the sync reset flow is initiated using the devlink reload fwactivate option, the PF already holds the...

UBUNTU-CVE-2025-39832

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix lockdep assertion on sync reset unload event Fix lockdep assertion triggered during sync reset unload event. When the sync reset flow is initiated using the devlink reload fwactivate option, the PF already holds the...

VulnCheck KEV: CVE-2022-37153

An issue was discovered in Artica Proxy 4.30.000000. There is a XSS vulnerability via the password parameter in /fw.login.php...

CVE-2023-53201: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: wraparound mbox producer index Driver is not handling the wraparound of the mbox producer index correctly. Currently the wraparound happens once u32 max is reached. Bit 31 of the producer index register is special an...

CVE-2025-58836

CVE-2025-58836 concerns the FW Anker WordPress plugin (Tikolan FW Anker) vulnerable to Stored XSS due to improper input neutralization during web page generation. Affected versions are FW Anker up to 1.2.6 (and earlier per sources). Public records indicate the vulnerability is not yet patched in ...

WordPress FW Anker Plugin <= 1.2.6 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Mika in WordPress Plugin FW Anker versions = 1.2.6...

CVE-2025-58836: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Franz Wieser FW Anker fw-anker allows Stored XSS.This issue affects FW Anker: from n/a through = 1.2.6...