Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414341)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414341 advisory. An issue was discovered in the Linux kernel before 6.0.11. Missing validation of IEEE80211P2PATTROPERCHANNEL in drivers/net/wireless/microchip/wilc1000/cfg80211.c in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414366)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414366 advisory. In the Linux kernel 5.8 through 5.19.x before 5.19.16, local attackers able to inject WLAN frames into the mac80211 stack could cause a NULL pointer dereference...

EUVD-2022-25572

Malicious code in bioql PyPI...

EUVD-2024-1428

Malicious code in bioql PyPI...

EUVD-2023-2566

Malicious code in bioql PyPI...

EUVD-2025-7732

Malicious code in bioql PyPI...

EUVD-2023-37298

Malicious code in bioql PyPI...

EUVD-2021-7440

Malicious code in bioql PyPI...

EUVD-2021-7436

Malicious code in bioql PyPI...

EUVD-2023-30843

Malicious code in bioql PyPI...

EUVD-2022-38784

Malicious code in bioql PyPI...

EUVD-2022-45788

Malicious code in bioql PyPI...

EUVD-2024-3308

Malicious code in bioql PyPI...

EUVD-2022-5589

Malicious code in bioql PyPI...

SUSE CVE-2025-59354

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the DragonFly2 uses a variety of hash functions, including the MD5 hash, for downloaded files. This allows attackers to replace files with malicious ones that have a colliding hash. This...

CVE-2025-59347

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, The Manager disables TLS certificate verification in HTTP clients. The clients are not configurable, so users have no way to re-enable the verification. A Manager processes dozens of preheat job...

CVE-2025-59410

Dragonfly CVE-2025-59410 affects the scheduler used for downloading tiny files prior to version 2.1.0, where the code path defaults to HTTP instead of HTTPS. This enables a potential Man-in-the-Middle attack to alter the data piece downloaded during the process. The issue is fixed in 2.1.0. The a...

CVE-2025-59351 Dragonfly possibly panics due to nil pointer dereference when using variables created alongside an error

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the first return value of a function is dereferenced even when the function returns an error. This can result in a nil dereference, and cause code to panic. This vulnerability is fixed in 2.1.0...

GNUnet P2P Framework 0.25.0

GNUnet is a peer-to-peer framework with focus on providing security. All peer-to-peer messages in the network are confidential and authenticated. The framework provides a transport abstraction layer and can currently encapsulate the network traffic in UDP IPv4 and IPv6, TCP IPv4 and IPv6, HTTP, o...

CVE-2025-59352: Exposure of Sensitive Information Through Data Queries

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the gRPC API and HTTP APIs allow peers to send requests that force the recipient peer to create files in arbitrary file system locations, and to read arbitrary files. This allows peers to steal...