EUVD-2024-37642

Malicious code in bioql PyPI...

EUVD-2023-0286

Malicious code in bioql PyPI...

EUVD-2022-6768

Malicious code in bioql PyPI...

EUVD-2023-1616

Malicious code in bioql PyPI...

EUVD-2022-0293

Malicious code in bioql PyPI...

EUVD-2022-0353

Malicious code in bioql PyPI...

EUVD-2022-4120

Malicious code in bioql PyPI...

EUVD-2021-28151

Malicious code in bioql PyPI...

EUVD-2025-28477

Malicious code in bioql PyPI...

EUVD-2022-7769

Malicious code in bioql PyPI...

EUVD-2022-0443

Malicious code in bioql PyPI...

EUVD-2023-27708

Malicious code in bioql PyPI...

EUVD-2022-45049

Malicious code in bioql PyPI...

EUVD-2023-2921

Malicious code in bioql PyPI...

GHSA-M8RJ-PPPH-MJ33 @plone/volto vulnerable to potential DoS by invoking specific URL by anonymous user

Impact When visiting a specific URL, an anonymous user could cause the NodeJS server part of Volto to quit with an error. Patches The problem has been patched and the patch has been backported to Volto major versions down until 16. It is advised to upgrade to the latest patch release of your...

PT-2025-40309

Name of the Vulnerable Software and Affected Versions Volto versions 16.34.0 through 16.34.1 Volto versions 17.0.0 through 17.22.1 Volto versions 18.0.0 through 18.27.1 Volto versions 19.0.0-alpha.1 through 19.0.0-alpha.5 Description An anonymous user can cause the NodeJS server part of Volto to...

CVE-2025-11083

A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elfswapshdr in the library bfd/elfcode.h of the component Linker. The manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit has been disclosed to the public an...

PT-2025-39347

🚨 New OracleLinux 8 Kernel Advisory: ELS-2025-16372 Patches CVE-2025-16372, a race condition flaw posing a DoS risk. Read more: 👉 https://t.co/kv9wdXoGbb Security https://t.co/CIpL06smgF...

CVE-2025-59822

Http4s is a Scala interface for HTTP services. In versions from 1.0.0-M1 to before 1.0.0-M45 and before 0.23.31, http4s is vulnerable to HTTP Request Smuggling due to improper handling of HTTP trailer section. This vulnerability could enable attackers to bypass front-end servers security controls...

CVE-2025-54081 SunshineService Has Unquoted Service Path That Allows Local SYSTEM Code Execution

Sunshine is a self-hosted game stream host for Moonlight. Prior to version 2025.923.33222, the Windows service SunshineService is installed with an unquoted executable path. If Sunshine is installed in a directory whose name includes a space, the Service Control Manager SCM interprets the path...