EUVD-2015-2406

Malware in sbrugna...

EUVD-2015-2408

Malware in sbrugna...

RockyLinux 9 : bootc (RLSA-2025:7160)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:7160 advisory. rust-openssl: rust openssl ssl::selectnextproto use after free CVE-2025-24898 Tenable has extracted the preceding description block directly from the RockyLinux...

EUVD-2023-59734

Malicious code in bioql PyPI...

EUVD-2024-0124

Malicious code in bioql PyPI...

EUVD-2022-33666

Malicious code in bioql PyPI...

EUVD-2024-0712

Malicious code in bioql PyPI...

EUVD-2023-52302

Malicious code in bioql PyPI...

EUVD-2025-2148

Malicious code in bioql PyPI...

EUVD-2021-28238

Malicious code in bioql PyPI...

EUVD-2022-0206

Malicious code in bioql PyPI...

EUVD-2022-3928

Malicious code in bioql PyPI...

EUVD-2022-7720

Malicious code in bioql PyPI...

EUVD-2025-31047

Malicious code in bioql PyPI...

The vulnerability of the NetworkPkg/IScsiDxe/IScsiProto.c component in the development environment for UEFI applications in EDK2 allows a attacker to compromise data integrity and cause service failures.

The vulnerability of the NetworkPkg/IScsiDxe/IScsiProto.c component in the UEFI applications of EDK2 development environment is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service failures...

Open Redirect

Overview @lobehub/chat is a Lobe Chat - an open-source, high-performance chatbot framework that supports speech synthesis, multimodal, and extensible Function Call plugin system. Supports one-click free deployment of your private ChatGPT/LLM web application. Affected versions of this package are...

CVE-2025-59426: URL Redirection to Untrusted Site

Lobe Chat is an open-source artificial intelligence chat framework. Prior to version 1.130.1, the project's OIDC redirect handling logic constructs the host and protocol of the final redirect URL based on the X-Forwarded-Host or Host headers and the X-Forwarded-Proto value. In deployments where a...

Prototype Pollution

Overview parse is a library that gives you access to the powerful Parse Server backend from your JavaScript app. Affected versions of this package are vulnerable to Prototype Pollution via the initializeState function. An attacker can cause a denial of service by injecting malicious properties in...

messageformat has a prototype pollution vulnerability

The messageformat package, an implementation of the Unicode MessageFormat 2 specification for JavaScript, is vulnerable to prototype pollution due to improper handling of message key paths in versions prior to 2.3.0. The flaw arises when processing nested message keys containing special character...

Prototype Pollution

Overview Affected versions of this package are vulnerable to Prototype Pollution via the removeAttributeNS function. An attacker can manipulate the prototype chain of JavaScript objects, potentially causing a denial-of-service attack by supplying malicious input that targets the proto property...