EUVD-2014-6452

Malware in sbrugna...

EUVD-2010-4430

Malware in sbrugna...

EUVD-2023-48466

Malicious code in bioql PyPI...

EUVD-2022-3433

Malicious code in bioql PyPI...

EUVD-2021-9475

Malicious code in bioql PyPI...

EUVD-2025-6837

Malicious code in bioql PyPI...

EUVD-2025-15014

Malicious code in bioql PyPI...

EUVD-2025-4151

Malicious code in bioql PyPI...

EUVD-2025-8214

Malicious code in bioql PyPI...

EUVD-2024-18711

Malicious code in bioql PyPI...

EUVD-2024-54355

Malicious code in bioql PyPI...

EUVD-2024-0089

Malicious code in bioql PyPI...

EUVD-2022-1066

Malicious code in bioql PyPI...

EUVD-2025-7039

Malicious code in bioql PyPI...

EUVD-2025-10498

Malicious code in bioql PyPI...

ROS-20250929-13

Vulnerability in Mozilla Firefox, Mozilla Firefox ESR, Mozilla Thunderbird email client is related to with an operation exceeding the memory buffer boundaries. Exploitation of the vulnerability could allow an attacker, acting remotely, to execute arbitrary code Vulnerability in JavaScript Engine...

CVE-2025-59347

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, The Manager disables TLS certificate verification in HTTP clients. The clients are not configurable, so users have no way to re-enable the verification. A Manager processes dozens of preheat job...

CVE-2025-59347 Dragonfly Manager makes requests to external endpoints with disabled TLS authentication

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, The Manager disables TLS certificate verification in HTTP clients. The clients are not configurable, so users have no way to re-enable the verification. A Manager processes dozens of preheat job...

Dragonfly's manager makes requests to external endpoints with disabled TLS authentication

The Manager disables TLS certificate verification in two HTTP clients figures 3.1 and 3.2. The clients are not configurable, so users have no way to re-enable the verification. golang func getAuthTokenctx context.Context, header http.Header string, error skipped client := &http.Client Timeout:...

libvpx: Integer overflow in vpx_img_alloc()

A flaw was found in libvpx. When creating images, libvpx trusts the width, height, and alignment of the user input. However, it does not properly validate the provided values. This flaw allows an attacker to craft user inputs or trick the user into opening crafted files, where these types of valu...