8835 matches found
Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2025-2124)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MONAI: Unsafe torch usage may lead to arbitrary code execution
Summary In modeldict = torch.loadfullpath, maplocation=torch.devicedevice, weightsonly=True in monai/bundle/scripts.py , weightsonly=True is loaded securely. However, insecure loading methods still exist elsewhere in the project, such as when loading checkpoints. This is a common practice when...
CVE-2025-58759 TinyEnv: Inline comments not stripped properly in .env values
TinyEnv is an environment variable loader for PHP applications. In versions 1.0.9 and 1.0.10, TinyEnv did not properly strip inline comments inside .env values. This could lead to unexpected behavior or misconfiguration, where variables contain unintended characters including or comment text...
CVE-2025-58759
TinyEnv is an environment variable loader for PHP applications. In versions 1.0.9 and 1.0.10, TinyEnv did not properly strip inline comments inside .env values. This could lead to unexpected behavior or misconfiguration, where variables contain unintended characters including or comment text...
CVE-2025-58758
TinyEnv is an environment variable loader for PHP applications. In versions 1.0.1, 1.0.2, 1.0.9, and 1.0.10, TinyEnv did not require the ".env" file to exist when loading environment variables. This could lead to unexpected behavior where the application silently ignores missing configuration,...
Denial Of Service (DoS)
org.bouncycastle, bc-fips is vulnerable to Denial Of Service DoS. The vulnerability is due to excessive allocation in the org.Bouncycastle.Crypto.Fips.NativeLoader module, which allows an attacker to exhaust system resources and cause a denial of service...
TinyEnv security vulnerability
TinyEnv is an environment variable loader for Dat Duy Personal Developer. A security vulnerability exists in TinyEnv versions 1.0.1, 1.0.2, 1.0.9, and 1.0.10, which stems from a checking deficiency in the .env file that could lead to unsafe default configurations...
CVE-2025-32321
In isSafeIntent of AccountTypePreferenceLoader.java, there is a possible way to bypass an intent type check due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
Noisy Bear Campaign Targeting Kazakhstan Energy Sector Outed as a Planned Phishing Test
A threat actor possibly of Russian origin has been attributed to a new set of attacks targeting the energy sector in Kazakhstan. The activity, codenamed Operation BarrelFire, is tied to a new threat group tracked by Seqrite Labs as Noisy Bear. The threat actor has been active since at least April...
CVE-2025-9365
Fuji Electric FRENIC-Loader 4 is vulnerable to a deserialization of untrusted data when importing a file through a specified window, which may allow an attacker to execute arbitrary code...
MAL-2025-43416 Malicious code in aether-venus-lacerta-less-loader (npm)
The package aether-venus-lacerta-less-loader was found to contain malicious code...
Malicious code in deneb-socketio-sass-loader-rollup-plugin (npm)
The package deneb-socketio-sass-loader-rollup-plugin was found to contain malicious code...
Malicious code in vega-areology-perseus-style-loader (npm)
The package vega-areology-perseus-style-loader was found to contain malicious code...
Malicious code in selenology-biohacking-css-loader-planckscale (npm)
The package selenology-biohacking-css-loader-planckscale was found to contain malicious code...
Malicious code in commitlint-sedimentology-got-css-loader (npm)
The package commitlint-sedimentology-got-css-loader was found to contain malicious code...
MAL-2025-45562 Malicious code in pino-style-loader-uninstall-hyperion (npm)
The package pino-style-loader-uninstall-hyperion was found to contain malicious code...
MAL-2025-46478 Malicious code in ursa-nestjs-less-loader-sails (npm)
The package ursa-nestjs-less-loader-sails was found to contain malicious code...
MAL-2025-44699 Malicious code in ini-envconfig-less-loader-hadron (npm)
The package ini-envconfig-less-loader-hadron was found to contain malicious code...