EUVD-2023-46235

Malicious code in bioql PyPI...

EUVD-2022-53131

Malicious code in bioql PyPI...

EUVD-2025-5786

Malicious code in bioql PyPI...

EUVD-2022-29945

Malicious code in bioql PyPI...

EUVD-2025-2776

Malicious code in bioql PyPI...

EUVD-2021-30692

Malicious code in bioql PyPI...

EUVD-2024-32718

Malicious code in bioql PyPI...

EUVD-2024-38207

Malicious code in bioql PyPI...

EUVD-2024-26925

Malicious code in bioql PyPI...

EUVD-2025-11573

Malicious code in bioql PyPI...

EUVD-2023-24036

Malicious code in bioql PyPI...

EUVD-2025-30276

Malicious code in bioql PyPI...

EUVD-2021-28604

Malicious code in bioql PyPI...

EUVD-2021-8601

Malicious code in bioql PyPI...

EUVD-2022-53489

Malicious code in bioql PyPI...

GHSA-6Q9C-M9FR-865M vet MCP Server SSE Transport DNS Rebinding Vulnerability

SafeDep vet is vulnerable to a DNS rebinding attack due to lack of HTTP Host and Origin header validation. To exploit this vulnerability following conditions must be met: 1. A vet scan is executed and reports are saved as sqlite3 database 2. A vet MCP server is running on default port with SSE...

Configure the Default Policies of iptables to DROP Properly

Generally, iptables policies can be configured in allowlist or blocklist mode. You are advised to configure iptables policies in allowlist mode. Connections that do not comply with the rules in the allowlist are prohibited. Therefore, you can configure the DROP or REJECT policy for the INPUT,...

Configure Proper Policies for INPUT of iptables

The INPUT chain is used to filter packets received from external systems. For any service provided for external systems, configure the corresponding INPUT policy and enable the related port so that external clients can access the service through the port. If the policy is not set, all packets tha...

avahi: Avahi Wide-Area DNS Uses Constant Source Port

A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected...

SUSE-SU-2025:20735-1 Security update for kernel-livepatch-MICRO-6-0_Update_8

This update for kernel-livepatch-MICRO-6-0Update8 fixes the following issues: - CVE-2025-38109: net/mlx5: fix ECVF vports unload on shutdown flow bsc1245685 - CVE-2025-38181: calipso: fix null-ptr-deref in calipsoreqset,delattr bsc1246001 - CVE-2025-38498: dochangetype: refuse to operate on...