EUVD-2024-19894

Malicious code in bioql PyPI...

EUVD-2021-7809

Malicious code in bioql PyPI...

EUVD-2023-27569

Malicious code in bioql PyPI...

EUVD-2022-46811

Malicious code in bioql PyPI...

EUVD-2025-26659

Malicious code in bioql PyPI...

EUVD-2024-19910

Malicious code in bioql PyPI...

EUVD-2022-46980

Malicious code in bioql PyPI...

Sensitive Information Disclosure

local-deep-research is vulnerable to Sensitive Information Disclosure. The vulnerability is due to insecure local storage because confidential data API keys, etc. are kept in an unencrypted SQLite database with a fixed, non-configurable location, allowing anyone with container or host filesystem...

The vulnerability of the bpf_local_storage.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the bpflocalstorage.c component in the Linux operating system is related to improper control of resource identifiers. Exploiting this vulnerability can allow an attacker to cause a service failure...

Malicious code in @sev-ui-verse/local-storage (npm)

The package @sev-ui-verse/local-storage was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5080905dc320899813f01d1c66b561c163fc638adfab5b390bdae2cac302cb7 Any computer that has this package installed or running should be considered...

MAL-2025-47541 Malicious code in @sev-ui-verse/local-storage (npm)

The package @sev-ui-verse/local-storage was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5080905dc320899813f01d1c66b561c163fc638adfab5b390bdae2cac302cb7 Any computer that has this package installed or running should be considered...

CVE-2025-36082

IBM OpenPages 9.0 and 9.1 allows web page cache to be stored locally which can be read by another user on the system...

PT-2025-37708

Name of the Vulnerable Software and Affected Versions IBM OpenPages versions 9.0 and 9.1 Description IBM OpenPages versions 9.0 and 9.1 allow web page cache to be stored locally, which can then be read by another user on the same system. Recommendations At the moment, there is no information abou...

OESA-2025-2273 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: scsi: core: ufs: Fix a hang in the error handler. ufshcderrhandlingprepare calls ufshcdrpmgetsync. The latter function can only succeed if UFSHCDEHINPROGRESS is...

SUSE CVE-2025-56760

When Memos 0.22 is configured to store objects locally, an attacker can create a file via the CreateResource endpoint containing a path traversal sequence in the name, allowing arbitrary file write on the server...

Linux Distros Unpatched Vulnerability : CVE-2016-4707

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CFNetwork in Apple iOS before 10 and OS X before 10.12 mishandles Local Storage deletion, which allows local users to discover the visited web sites of arbitrar...

GHSA-RPW8-82V9-3Q87 Fides' Admin UI User Password Change Does Not Invalidate Current Session

Summary Admin UI user password changes in Fides do not invalidate active user sessions, creating a vulnerability chaining opportunity where attackers who have obtained session tokens through other attack vectors such as XSS can maintain access even after password reset. This issue is not directly...

CVE-2025-9937

A security flaw has been discovered in elunez eladmin 1.1. Impacted is the function deleteFile of the component LocalStorageController. The manipulation results in improper authorization. The attack may be performed from remote. The exploit has been released to the public and may be exploited...

CVE-2025-58351

Outline is a service that allows for collaborative documentation. In versions 0.72.0 through 0.83.0, Outline introduced a feature which facilitates local file system storage capabilities as an optional file storage strategy. This feature allowed a CSP bypass as well as a ContentType bypass that...

GHSA-78J5-8VQ7-JXV5 Memos Vulnerable to Path Traversal via the CreateResource Endpoint

When Memos 0.22 is configured to store objects locally, an attacker can create a file via the CreateResource endpoint containing a path traversal sequence in the name, allowing arbitrary file write on the server...