EUVD-2024-46779

Malicious code in bioql PyPI...

EUVD-2023-59342

Malicious code in bioql PyPI...

EUVD-2023-32665

Malicious code in bioql PyPI...

EUVD-2024-27595

Malicious code in bioql PyPI...

EUVD-2023-59104

Malicious code in bioql PyPI...

EUVD-2024-27596

Malicious code in bioql PyPI...

EUVD-2023-57972

Malicious code in bioql PyPI...

EUVD-2021-30056

Malicious code in bioql PyPI...

EUVD-2022-15983

Malicious code in bioql PyPI...

EUVD-2023-31198

Malicious code in bioql PyPI...

Pointer leaks through pointer-keyed data structures

Posted by Jann Horn, Google Project Zero Introduction Some time in 2024, during a Project Zero team discussion, we were talking about how remote ASLR leaks would be helpful or necessary for exploiting some types of memory corruption bugs, specifically in the context of Apple devices. Coming from...

PT-2025-39316

Name of the Vulnerable Software and Affected Versions min-document versions prior to 2.19.0 Description A flaw exists in the 'min-document' package due to improper handling of namespace operations within the removeAttributeNS function. An attacker can exploit this by manipulating the prototype...

SUSE CVE-2023-53440

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix sysfs interface lifetime The current nilfs2 sysfs support has issues with the timing of creation and deletion of sysfs entries, potentially leading to null pointer dereferences, use-after-free, and lockdep warnings...

CVE-2025-9573

The nsbackup extension through 13.0.2 for TYPO3 allows command injection...

Command Injection

Overview nitsan/ns-backup is an extension for TYPO3 that lets you save your code, files, and database with just a few clicks. Install Backup Plus and connect it to your cloud storage like Google Drive, Dropbox, Amazon S3, SFTP, Rsync, etc.. Affected versions of this package are vulnerable to...

CVE-2025-9573

The nsbackup extension through 13.0.2 for TYPO3 allows command injection...

CVE-2025-9573

The CVE-2025-9573 entry concerns TYPO3 ns_backup (ns-backup) extension versions up to 13.0.2, where a command injection flaw exists in the generateBackup function. The root cause is improper handling of input that leads to arbitrary command execution when an administrator uses the extension’s bac...

CVE-2025-9573 Command Injection in extension "TYPO3 Backup Plus" (ns_backup)

The nsbackup extension through 13.0.2 for TYPO3 allows command injection...

PT-2025-35539

Name of the Vulnerable Software and Affected Versions: alaneuler batteryKid versions 2.0 through 2.1 Description: A weakness has been identified in alaneuler batteryKid on macOS. The affected element is an unknown function within the file PrivilegeHelper/PrivilegeHelper.swift of the NSXPCListener...

Linux Distros Unpatched Vulnerability : CVE-2025-32743

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ConnMan through 1.44, the lookup string in nsresolv in dnsproxy.c can be NULL or an empty string when the TC Truncated bit is set in a DNS response. This...