EUVD-2021-32221

Malicious code in bioql PyPI...

EUVD-2023-49506

Malicious code in bioql PyPI...

EUVD-2023-48021

Malicious code in bioql PyPI...

EUVD-2024-41339

Malicious code in bioql PyPI...

EUVD-2024-21200

Malicious code in bioql PyPI...

EUVD-2024-20689

Malicious code in bioql PyPI...

EUVD-2025-8055

Malicious code in bioql PyPI...

EUVD-2022-49201

Malicious code in bioql PyPI...

EUVD-2025-22030

Malicious code in bioql PyPI...

EUVD-2025-22031

Malicious code in bioql PyPI...

EUVD-2025-22035

Malicious code in bioql PyPI...

EUVD-2021-30578

Malicious code in bioql PyPI...

EUVD-2025-20081

Malicious code in bioql PyPI...

EUVD-2024-41337

Malicious code in bioql PyPI...

EUVD-2022-38299

Malicious code in bioql PyPI...

Mbed TLS 3.6.4 - Use-After-Free

/ Exploit Title: Mbed TLS 3.6.4 - Use-After-Free Google Dork: N/A Date: 2025-08-29 Exploit Author: Byte Reaper Vendor Homepage: https://github.com/Mbed-TLS/mbedtls Software Link: https://github.com/Mbed-TLS/mbedtls Version: ≤ 3.6.4 Tested on: Kali Linux CVE: CVE-2025-47917 / include include inclu...

An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). A NULL algorithm parameters entry looks identical to an array of REAL (size zero) and thus the certificate is considered valid. However, if the parameters do not match in any way, then the certificate should be considered invalid.

...

Mbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by an mbedtls_ssl_set_session() failure.

...

An issue was discovered in Arm Mbed TLS before 2.24.0. mbedtls_x509_crl_parse_der has a buffer over-read (of one byte).

...

In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding allows system-level (administrator) attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single stepped, especially Intel SGX.

...