EUVD-2023-43113

Malicious code in bioql PyPI...

EUVD-2024-52633

Malicious code in bioql PyPI...

EUVD-2024-39414

Malicious code in bioql PyPI...

EUVD-2021-32619

Malicious code in bioql PyPI...

java-21-openjdk security update

An update is available for java-21-openjdk. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime...

RLSA-2025:10873 Important: java-21-openjdk security update

The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security Fixes: JDK: Better Glyph drawing CVE-2025-30749 JDK: Enhance TLS protocol support CVE-2025-30754 JDK: Improve HTTP client header handling CVE-2025-50059 JDK: Better...

DirectAdmin Evolution Skin 安全漏洞

DirectAdmin Evolution Skin is an application from DirectAdmin, Inc. A security vulnerability exists in DirectAdmin Evolution Skin version 1.680 that stems from a specially crafted GET request that can manipulate the page layout, potentially causing the login screen to be replaced with...

CVE-2025-43953

In 2wcom IP-4c 2.16, the web interface allows admin and manager users to execute arbitrary code as root via a ping or traceroute field on the TCP/IP screen...

The vulnerability of the GNU screen terminal multiplexer, related to synchronization errors when using a shared resource (“Race Situation”), allows a intruder to increase their privileges.

The vulnerability of the GNU screen terminal multiplexer is related to synchronization errors when using a shared resource „Race Situation“. Exploiting this vulnerability can allow an attacker to gain elevated privileges...

2wcom IP-4c 安全漏洞

The 2wcom IP-4c is an audio codec device from the German company 2wcom. A security vulnerability exists in the 2wcom IP-4c version 2.16, which originates from a web interface that allows administrator and manager users to execute arbitrary code as root via the ping or traceroute fields on the...

The vulnerability of the GNU screen terminal multiplexer, related to information disclosure due to incompatibility, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the terminal multiplexer in GNU screen is related to the disclosure of information through mismatches. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information. The vulnerability of the terminal multiplexer in GNU screen also...

CVE-2025-43953

In 2wcom IP-4c 2.16, the web interface allows admin and manager users to execute arbitrary code as root via a ping or traceroute field on the TCP/IP screen...

CVE-2025-43953

The 2wcom IP-4c audio codec device (version 2.16 ) contains a vulnerability where the web interface allows admin and manager users to execute arbitrary code as root . The root cause is the improper neutralization of special elements used in a command, specifically within the ping or traceroute fi...

The vulnerability of the GNU screen terminal multiplexer, related to the improper use of standard resolutions, allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the GNU screen terminal multiplexer is related to the incorrect use of standard resolutions. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

The vulnerability of the GNU screen terminal multiplexer lies in the improper assignment of permissions to critical resources, allowing a intruder to gain unauthorized access to protected information.

The vulnerability of the GNU screen terminal multiplexer is related to the improper assignment of permissions for a critical resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

SilentSync RAT Delivered via Two Malicious PyPI Packages Targeting Python Developers

Cybersecurity researchers have discovered two new malicious packages in the Python Package Index PyPI repository that are designed to deliver a remote access trojan called SilentSync on Windows systems. "SilentSync is capable of remote command execution, file exfiltration, and screen capturing,"...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not properly handling screen updates in a disabled state of the downstream interface, which could lead to a...

Apple macOS Tahoe state mismanagement vulnerability

Apple macOS Tahoe is the 26th major release of Apple's macOS operating system, which was released on June 10, 2025, and features a new "Liquid Glass" visual design that significantly optimizes interface aesthetics, feature integration, and cross-device collaboration. The 26th major version of the...

CVE-2025-24133

This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 26 and iPadOS 26. Keyboard suggestions may display sensitive information on the lock screen...

CVE-2025-31271

This issue was addressed through improved state management. This issue is fixed in macOS Tahoe 26. Incoming FaceTime calls can appear or be accepted on a locked macOS device, even with notifications disabled on the lock screen...