Fiber Utils 安全特征问题漏洞

Fiber Utils is a general-purpose function library in the Fiber open source. A security feature issue vulnerability exists in Fiber Utils 2.0.0-rc.3 and earlier versions, which stems from the return of a predictable UUID on failure of the random number generator, which could lead to compromised...

Fiber Utils UUIDv4 and UUID Silent Fallback to Predictable Values

Summary Critical security vulnerabilities exist in both the UUIDv4 and UUID functions of the github.com/gofiber/utils package. When the system's cryptographic random number generator crypto/rand fails, both functions silently fall back to returning predictable UUID values, the zero UUID...

GHSA-M98W-CQP3-QCQR Fiber Utils UUIDv4 and UUID Silent Fallback to Predictable Values

Summary Critical security vulnerabilities exist in both the UUIDv4 and UUID functions of the github.com/gofiber/utils package. When the system's cryptographic random number generator crypto/rand fails, both functions silently fall back to returning predictable UUID values, the zero UUID...

Frequency-Matching Quantum Key Distribution

Quantum key distribution QKD enables information-theoretically secure communication against eavesdropping. However, phase instability remains a challenge across many QKD applications, particularly in schemes such as twin-field QKD and measurement-device-independent QKD. The most dominant source o...

PT-2025-49091

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0 Description The Linux kernel contains a flaw within the nvme-fc subsystem. Specifically, the issue arises from improper handling of work queues during the deletion of an NVMe-FC controller association. The...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989807)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989807 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix potential NULL pointer dereference in fclportptpsetup fclportptpsetup did not...

EUVD-2020-21093

Malware in sbrugna...

EUVD-2021-1299

Malware in sbrugna...

EUVD-2018-4226

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987036)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987036 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix listadd corruption in lpfcdraintxq When parsing the txq list in lpfcdraintxq, the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986321)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986321 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix array index out of bound exception Fix array index out of bound exception in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986538)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986538 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix potential NULL pointer dereference in fclportptpsetup fclportptpsetup did not...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-384277)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-384277 advisory. In the Linux kernel, the following vulnerability has been resolved: net: phy: dp83869: fix memory corruption when enabling fiber When configuring the fiber port, the...

EUVD-2025-23668

Malicious code in bioql PyPI...

EUVD-2024-0629

Malicious code in bioql PyPI...

EUVD-2025-16352

Malicious code in bioql PyPI...

EUVD-2024-47464

Malicious code in bioql PyPI...

UBUNTU-CVE-2022-50467

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix null ndlp ptr dereference in abnormal exit path for GFTID An error case exit from lpfccmplctcmdgftid results in a call to lpfcnlpput with a null pointer to a nodelist structure. Changed lpfccmplctcmdgftid to...

CVE-2023-53245 scsi: storvsc: Fix handling of virtual Fibre Channel timeouts

In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Fix handling of virtual Fibre Channel timeouts Hyper-V provides the ability to connect Fibre Channel LUNs to the host system and present them in a guest VM as a SCSI device. I/O to the vFC device is handled by the...

DEBIAN-CVE-2025-38695

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Check for hdwq null ptr when cleaning up lpfcvport structure If a call to lpfcsli4readrev from lpfcsli4hbasetup fails, the resultant cleanup routine lpfcsli4vportdeletefcpxriaborted may occur before sli4hba.hdwqs are...