Friday Squid Blogging: Pilot Whales Eat a Lot of Squid

Short-finned pilot wales Globicephala macrorhynchus eat at lot of squid: To figure out a short-finned pilot whale's caloric intake, Gough says, the team had to combine data from a variety of sources, including movement data from short-lasting tags, daily feeding rates from satellite tags, body...

intake-hive (0.1.0), sparklanes (>=0.2.0, <=0.2.4) potentially affected by CVE-2025-55039 via pyspark (2.3.0)

pyspark PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - intake-hive 0.1.0 - sparklanes =0.2.0, =0.2.4 Source cves: CVE-2025-55039 Source advisory: OSV:GHSA-6P6V-M64V-JX8Q...

intake-hive (0.1.0), sparklanes (>=0.2.0, <=0.2.4) potentially affected by CVE-2025-55039 via pyspark (2.3.0)

pyspark PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - intake-hive 0.1.0 - sparklanes =0.2.0, =0.2.4 Source cves: CVE-2025-55039 Source advisory: OSV:PYSEC-2025-184...

PT-2025-1884

Name of the Vulnerable Software and Affected Versions The Perfect Portal Widgets plugin for WordPress versions up to, and including, 3.0.3 Description The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping on user-supplied attributes in the...

intake-hive (0.1.0), sparklanes (>=0.2.0, <=0.2.4) potentially affected by CVE-2022-33891 +1 more via pyspark (2.3.0)

pyspark PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - intake-hive 0.1.0 - sparklanes =0.2.0, =0.2.4 Source cves: CVE-2022-33891, CVE-2023-32007 Source advisory: OSV:PYSEC-2023-72...

intake-hive (0.1.0), sparklanes (>=0.2.0, <=0.2.4) potentially affected by CVE-2023-22946 via pyspark (2.3.0)

pyspark PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - intake-hive 0.1.0 - sparklanes =0.2.0, =0.2.4 Source cves: CVE-2023-22946 Source advisory: OSV:GHSA-329J-JFVR-RHR6...

intake-hive (0.1.0), sparklanes (>=0.2.0, <=0.2.4) potentially affected by CVE-2023-22946 via pyspark (2.3.0)

pyspark PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - intake-hive 0.1.0 - sparklanes =0.2.0, =0.2.4 Source cves: CVE-2023-22946 Source advisory: OSV:PYSEC-2023-44...

web.intake.education Cross Site Scripting vulnerability OBB-3199993

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

intake-hive (0.1.0), sparklanes (>=0.2.0, <=0.2.4) potentially affected by CVE-2022-31777 via pyspark (2.3.0)

pyspark PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - intake-hive 0.1.0 - sparklanes =0.2.0, =0.2.4 Source cves: CVE-2022-31777 Source advisory: OSV:GHSA-43XG-8WMJ-CW8H...

intake-hive (0.1.0), sparklanes (>=0.2.0, <=0.2.4) potentially affected by CVE-2022-31777 via pyspark (2.3.0)

pyspark PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - intake-hive 0.1.0 - sparklanes =0.2.0, =0.2.4 Source cves: CVE-2022-31777 Source advisory: OSV:PYSEC-2022-42976...

intake-hive (0.1.0), sparklanes (>=0.2.0, <=0.2.4) potentially affected by CVE-2022-33891 via pyspark (2.3.0)

pyspark PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - intake-hive 0.1.0 - sparklanes =0.2.0, =0.2.4 Source cves: CVE-2022-33891 Source advisory: OSV:GHSA-4X9R-J582-CGR8...

intake-hive (0.1.0), sparklanes (>=0.2.0, <=0.2.4) potentially affected by CVE-2022-33891 via pyspark (2.3.0)

pyspark PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - intake-hive 0.1.0 - sparklanes =0.2.0, =0.2.4 Source cves: CVE-2022-33891 Source advisory: OSV:PYSEC-2022-236...

intake-hive (0.1.0), sparklanes (>=0.2.0, <=0.2.4) potentially affected by CVE-2021-38296 via pyspark (2.3.0)

pyspark PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - intake-hive 0.1.0 - sparklanes =0.2.0, =0.2.4 Source cves: CVE-2021-38296 Source advisory: OSV:GHSA-9RR6-JPG7-9JG6...

intake-hive (0.1.0), sparklanes (>=0.2.0, <=0.2.4) potentially affected by CVE-2021-38296 via pyspark (2.3.0)

pyspark PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - intake-hive 0.1.0 - sparklanes =0.2.0, =0.2.4 Source cves: CVE-2021-38296 Source advisory: OSV:PYSEC-2022-186...

Early user can break addLiquidity

Handle WatchPug Vulnerability details uint256 totalLiquidityUnits = totalSupply; if totalLiquidityUnits == 0 liquidity = nativeDeposit; // TODO: Contact ThorChain on proper approach In the current implementation, the first liquidity takes the nativeDeposit amount and uses it directly. However,...

WordPress Plugin Fitness Calculators 1.9.5 - Cross-Site Request Forgery (CSRF)

Exploit Title: WordPress Plugin Fitness Calculators 1.9.5 - Cross-Site Request Forgery CSRF Date: 2/28/2021 Author: 0xB9 Software Link: https://wordpress.org/plugins/fitness-calculators/ Version: 1.9.5 Tested on: Windows 10 CVE: CVE-2021-24272 1. Description: The plugin add calculators for Water...

WordPress Fitness Calculators 1.9.5 Cross Site Request Forgery

Exploit Title: WordPress Plugin Fitness Calculators 1.9.5 - Cross-Site Request Forgery CSRF Date: 2/28/2021 Author: 0xB9 Software Link: https://wordpress.org/plugins/fitness-calculators/ Version: 1.9.5 Tested on: Windows 10 CVE: CVE-2021-24272 1. Description: The plugin add calculators for Water...

WordPress Fitness Calculators 1.9.5 Plugin - Cross-Site Request Forgery Vulnerability

Exploit Title: WordPress Plugin Fitness Calculators 1.9.5 - Cross-Site Request Forgery CSRF Author: 0xB9 Software Link: https://wordpress.org/plugins/fitness-calculators/ Version: 1.9.5 Tested on: Windows 10 CVE: CVE-2021-24272 1. Description: The plugin add calculators for Water intake, BMI...

CISA Announces Vulnerability Disclosure Policy (VDP) Platform

CISA has announced the establishment of its Vulnerability Disclosure Policy VDP Platform for the federal civilian enterprise, which will allow the Federal Civilian Executive Branch to coordinate with the civilian security research community in a streamlined fashion. The VDP Platform provides a...

CVE-2021-24272 Fitness Calculators < 1.9.6 - Cross-Site Request Forgery to Cross-Site Scripting (XSS)

The fitness calculators WordPress plugin before 1.9.6 add calculators for Water intake, BMI calculator, protein Intake, and Body Fat and was lacking CSRF check, allowing attackers to make logged in users perform unwanted actions, such as change the calculator headers. Due to the lack of...