EUVD-2011-4720

Malware in sbrugna...

EUVD-2018-8230

Malware in sbrugna...

EUVD-2019-0346

Malware in sbrugna...

EUVD-2011-4732

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414501)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414501 advisory. A vulnerability was found in kvms390guestsidaop in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Linux kernel. This flaw allows a local attacker with ...

EUVD-2022-33593

Malicious code in bioql PyPI...

EUVD-2023-1481

Malicious code in bioql PyPI...

EUVD-2025-31058

Malicious code in bioql PyPI...

EUVD-2025-31018

Malicious code in bioql PyPI...

EUVD-2023-28265

Malicious code in bioql PyPI...

EUVD-2022-32825

Malicious code in bioql PyPI...

EUVD-2023-1273

Malicious code in bioql PyPI...

EUVD-2022-51759

Malicious code in bioql PyPI...

lrzsz before version 0.12.21~rc can leak information to the receiving side due to an incorrect length check in the function zsdata that causes a size_t to wrap around.

...

Malicious code in rc-phoenix-tpp-upper-funnel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7339748c4b25b1fb792f426edc2468aea1f9a626a53d8b25a29b364b48165d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Improper Validation of Syntactic Correctness of Input

Overview Affected versions of this package are vulnerable to Improper Validation of Syntactic Correctness of Input in the torch.Tensor.random function when a model is compiled with Inductor. An attacker can cause the application to crash or become unresponsive by triggering a syntax error...

GHSA-R2RV-8PP3-65XW spmrc vulnerable to prototype pollution

spmrc is a package that provides the rc manager for spm. A Prototype Pollution vulnerability in the set and config function of spmrc version 1.2.0 and before allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service DoS as the minimum...

CVE-2025-56819

An issue in Datart v.1.0.0-rc.3 allows a remote attacker to execute arbitrary code via the INIT connection parameter...

CVE-2025-56819

An issue in Datart v.1.0.0-rc.3 allows a remote attacker to execute arbitrary code via the INIT connection parameter...

CVE-2025-56819

The Datart open-source data visualization platform (version 1.0.0-rc.3 ) is vulnerable to Remote Code Execution (RCE) due to improper handling of the INIT connection parameter. This flaw, classified as CWE-78 (OS Command Injection), allows a remote attacker to execute arbitrary code, potentially ...