FreeBSD : Gitlab -- vulnerabilities (9d9940e7-071c-11f1-93ca-2cf05da270f3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 9d9940e7-071c-11f1-93ca-2cf05da270f3 advisory. Gitlab reports: Incomplete Validation issue in Web IDE impacts GitLab CE/EE Denial of Service...

Exploit for CVE-2025-27407

PoCCVE-2025-27407 Proof of concept for a remote code executi...

[SECURITY] Fedora 42 Update: gammaray-3.1.0-15.fc42

A tool to poke around in a Qt-application and also to manipulate the application to some extent. It uses various DLL injection techniques to hook into an application at run-time and provide access to a lot of interesting information. GammaRay can introspect Qt 6 and Qt 5 applications...

[SECURITY] Fedora 43 Update: gi-docgen-2025.5-1.fc43

GI-DocGen is a document generator for GObject-based libraries. GObject is the base type system of the GNOME project. GI-Docgen reuses the introspection data generated by GObject-based libraries to generate the API reference of these libraries, as well as other ancillary documentation. GI-DocGen i...

[SECURITY] Fedora 41 Update: gi-docgen-2025.5-1.fc41

GI-DocGen is a document generator for GObject-based libraries. GObject is the base type system of the GNOME project. GI-Docgen reuses the introspection data generated by GObject-based libraries to generate the API reference of these libraries, as well as other ancillary documentation. GI-DocGen i...

[SECURITY] Fedora 42 Update: gi-docgen-2025.5-1.fc42

GI-DocGen is a document generator for GObject-based libraries. GObject is the base type system of the GNOME project. GI-Docgen reuses the introspection data generated by GObject-based libraries to generate the API reference of these libraries, as well as other ancillary documentation. GI-DocGen i...

EUVD-2020-7291

Malware in sbrugna...

EUVD-2021-1410

Malware in sbrugna...

EUVD-2021-2411

Malware in sbrugna...

EUVD-2025-21001

Malicious code in bioql PyPI...

EUVD-2024-47859

Malicious code in bioql PyPI...

EUVD-2024-16353

Malicious code in bioql PyPI...

EUVD-2025-25266

Malicious code in bioql PyPI...

EUVD-2025-25267

Malicious code in bioql PyPI...

EUVD-2025-12540

Malicious code in bioql PyPI...

EUVD-2025-24858

Malicious code in bioql PyPI...

EUVD-2025-29489

Malicious code in bioql PyPI...

EUVD-2024-3173

Malicious code in bioql PyPI...

Query Depth Restriction Bypass

@escape.tech/graphql-armor-max-depth is vulnerable to query depth restriction bypass. The vulnerability is due to the ignoreIntrospection option being enabled by default, which allows an attacker to bypass the max-depth restriction by naming a query or fragment schema...

Allocation Of Resources Without Limits

@escape.tech/graphql-armor-max-depth is vulnerable to Allocation Of Resources Without Limits. The vulnerability is due to improper introspection handling because when ignoreIntrospection is enabled the default, an attacker can name a query/fragment schema to evade max-depth checks and craft...