CVE-2025-58958: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeMove SmilePure smilepure allows PHP Local File Inclusion.This issue affects SmilePure: from n/a through 1.8.5...

CVE-2025-61929: Improper Control of Generation of Code

Cherry Studio is a desktop client that supports for multiple LLM providers. Cherry Studio registers a custom protocol called cherrystudio://. When handling the MCP installation URL, it parses the base64-encoded configuration data and directly executes the command within it. In the files...

EUVD-2019-13330

Malware in sbrugna...

EUVD-2020-12591

Malware in sbrugna...

EUVD-2021-2320

Malware in sbrugna...

EUVD-2025-30761

Malicious code in bioql PyPI...

EUVD-2025-15752

Malicious code in bioql PyPI...

EUVD-2025-28547

Malicious code in bioql PyPI...

EUVD-2025-20006

Malicious code in bioql PyPI...

EUVD-2024-22236

Malicious code in bioql PyPI...

EUVD-2022-6975

Malicious code in bioql PyPI...

EUVD-2025-25335

Malicious code in bioql PyPI...

EUVD-2025-10553

Malicious code in bioql PyPI...

EUVD-2024-48360

Malicious code in bioql PyPI...

EUVD-2025-12082

Malicious code in bioql PyPI...

EUVD-2023-1206

Malicious code in bioql PyPI...

CVE-2025-34226: Improper Control of a Resource Through its Lifetime

OpenPLC Runtime v3 contains an input validation flaw in the /upload-program-action endpoint: the epochtime field supplied during program uploads is not validated and can be crafted to induce corruption of the programs database. After a successful malformed upload the runtime continues to operate...

CVE-2025-11153: Improper Control of Generation of Code

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 143.0.3...

The vulnerability of the arm64 component of the Linux operating system’s kernel, which allows a hacker to trigger a service failure

The vulnerability of the arm64 component in the Linux operating system is related to improper control of resource identifiers. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the destroy_unused_implicit_child_mr() function in the mlx5/odp.c component of the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the destroyunusedimplicitchildmr function in the mlx5/odp.c component of the Linux kernel is related to improper control of resource identifiers. Exploiting this vulnerability could allow an attacker to cause a service failure...