Siemens SIMATIC Devices Improper Control of Resource Identifiers (CVE-2024-42265)

"In the Linux kernel, the following vulnerability has been resolved: protect the fetch of -fdfd in dodup2 from mispredictions both callers have verified that fd is not greater than -maxfds; however, misprediction might end up with tofree = fdt-fdfd; being speculatively executed. That's wrong for...

EUVD-2014-1797

Malware in sbrugna...

EUVD-2020-26902

Malware in sbrugna...

EUVD-2022-28583

Malicious code in bioql PyPI...

EUVD-2024-48543

Malicious code in bioql PyPI...

EUVD-2025-4420

Malicious code in bioql PyPI...

EUVD-2025-18972

Malicious code in bioql PyPI...

EUVD-2025-24073

Malicious code in bioql PyPI...

EUVD-2025-26164

Malicious code in bioql PyPI...

EUVD-2025-25408

Malicious code in bioql PyPI...

EUVD-2025-4255

Malicious code in bioql PyPI...

EUVD-2024-32844

Malicious code in bioql PyPI...

The vulnerability of the init_user_queue() function in the kfd_process_queue_manager.c component of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the inituserqueue function in the kfdprocessqueuemanager.c component of the Linux operating system is related to improper control of resource identifiers. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the __send_emptyFlush() function in the Linux kernel driver allows a hacker to compromise data integrity and cause service failures.

The vulnerability of the sendemptyFlush function in the Linux kernel driver is related to improper control of resource identifiers. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service failures...

Security update for ruby2.5

This update for ruby2.5 fixes the following issues: CVE-2025-6442: Fixed readheader HTTP Request Smuggling Vulnerability in WEBrick bsc1245254 CVE-2025-27221: Fixed userinfo leakage in URIjoin, URImerge and URI+ bsc1237805 Patch Instructions: To install this SUSE update use the SUSE recommended...

CVE-2025-9619

A security flaw has been discovered in E4 Sistemas Mercatus ERP 2.00.019. The affected element is an unknown function of the file /basico/webservice/imprimir-danfe/id/. Performing manipulation results in improper control of resource identifiers. It is possible to initiate the attack remotely. The...

CVE-2025-9619

A security flaw has been discovered in E4 Sistemas Mercatus ERP 2.00.019. The affected element is an unknown function of the file /basico/webservice/imprimir-danfe/id/. Performing manipulation results in improper control of resource identifiers. It is possible to initiate the attack remotely. The...

CVE-2025-9619

CVE-2025-9619 affects E4 Sistemas Mercatus ERP 2.00.019. The vulnerability is due to manipulation of an unknown function in the file /basico/webservice/imprimir-danfe/id/, causing improper control of resource identifiers. Exploitation can be performed remotely. Multiple sources (NVD, Red Hat, CVE...

CVE-2025-9619 E4 Sistemas Mercatus ERP id resource injection

A security flaw has been discovered in E4 Sistemas Mercatus ERP 2.00.019. The affected element is an unknown function of the file /basico/webservice/imprimir-danfe/id/. Performing manipulation results in improper control of resource identifiers. It is possible to initiate the attack remotely. The...

CVE-2025-9619 E4 Sistemas Mercatus ERP id resource injection

A security flaw has been discovered in E4 Sistemas Mercatus ERP 2.00.019. The affected element is an unknown function of the file /basico/webservice/imprimir-danfe/id/. Performing manipulation results in improper control of resource identifiers. It is possible to initiate the attack remotely. The...