EUVD-2024-41529

Malicious code in bioql PyPI...

EUVD-2023-2749

Malicious code in bioql PyPI...

EUVD-2022-27887

Malicious code in bioql PyPI...

EUVD-2025-6529

Malicious code in bioql PyPI...

EUVD-2025-5324

Malicious code in bioql PyPI...

EUVD-2022-3675

Malicious code in bioql PyPI...

EUVD-2022-5479

Malicious code in bioql PyPI...

EUVD-2023-35299

Malicious code in bioql PyPI...

EUVD-2022-35332

Malicious code in bioql PyPI...

EUVD-2022-1411

Malicious code in bioql PyPI...

EUVD-2021-8702

Malicious code in bioql PyPI...

EUVD-2017-12852

Malicious code in bioql PyPI...

EUVD-2022-1741

Malicious code in bioql PyPI...

CVE-2025-39912

In the Linux kernel, the following vulnerability has been resolved: nfs/localio: restore creds before releasing pageio data Otherwise if the nfsd filecache code releases the nfsdfile immediately, it can trigger the BUGONcred == current-cred in putcred when it puts the nfsdfile-nffile-f-cred...

CVE-2025-46152

The PyTorch machine learning framework contains a security vulnerability in the torch.bitwise_right_shift interface. The flaw occurs because the function mishandles out-of-bounds values for the **

CVE-2025-59335 CubeCart Session Not Invalidated After Password Change

CubeCart is an ecommerce software solution. Prior to version 6.5.11, there is an absence of automatic session expiration following a user's password change. This oversight poses a security risk, as if a user forgets to log out from a location where they accessed their account, an unauthorized use...

Firefox -- Spoofing issue in the Site Permissions component

https://bugzilla.mozilla.org/showbug.cgi?id=1665334 reports: Spoofing issue in the Site Permissions component...

CVE-2025-27238 API hostprototype.get lists data to users with insufficient authorization.

Due to a bug in Zabbix API, the hostprototype.get method lists all host prototypes to users that do not have any user groups assigned to them...

Security Bulletin: Publicly disclosed libcurl vulnerabilities affects IBM Safer Payments (CVE-2024-9681)

Summary Libcurl is used by IBM Safer Payments as part of the AVRO support for Kafka. This vulnerability has been addressed. Vulnerability Details CVEID:CVE-2024-9681 DESCRIPTION: When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent domain's cache entry, making ...

Django: Path traversal via archive.extract - CVE 2021-3281 incomplete patch

A vulnerability was discovered in the "extract" function of the ZipArchive and TarArchive classes in the Django framework. The vulnerability was caused by the use of the "abspath" function, which removes terminating path separators. This made the guard logic protection insufficient to protect...