EUVD-2024-42721

Malicious code in bioql PyPI...

EUVD-2022-7688

Malicious code in bioql PyPI...

EUVD-2025-1721

Malicious code in bioql PyPI...

EUVD-2021-9694

Malicious code in bioql PyPI...

EUVD-2022-51017

Malicious code in bioql PyPI...

EUVD-2021-6748

Malicious code in bioql PyPI...

EUVD-2025-30935

Malicious code in bioql PyPI...

EUVD-2024-38062

Malicious code in bioql PyPI...

EUVD-2024-40035

Malicious code in bioql PyPI...

EUVD-2025-6371

Malicious code in bioql PyPI...

EUVD-2025-15580

Malicious code in bioql PyPI...

EUVD-2025-15582

Malicious code in bioql PyPI...

EUVD-2022-4874

Malicious code in bioql PyPI...

EUVD-2025-4305

Malicious code in bioql PyPI...

Insufficient Session Expiration

weblate is vulnerable to Insufficient Session Expiration. The vulnerability is due to unsafe settings for the second factor in 2FA due to sessions being allowed to persist for an unusually long period, and an attacker can maintain a valid session to repeatedly attempt authentication, thereby...

[SECURITY] Fedora 41 Update: sqlite-3.46.1-5.fc41

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...

Canonical LXD Vulnerable to Privilege Escalation via WebSocket Connection Hijacking in Operations API

Impact LXD's operations API includes secret values necessary for WebSocket connections when retrieving information about running operations. These secret values are used for authentication of WebSocket connections for terminal and console sessions. Therefore, attackers with only read permissions...

DEBIAN-CVE-2025-54289

Privilege Escalation in operations API in Canonical LXD 6.5 on multiple platforms allows attacker with read permissions to hijack terminal or console sessions and execute arbitrary commands via WebSocket connection hijacking format...

CVE-2025-54289 Privilege Escalation via WebSocket Connection Hijacking in LXD Operations API

Privilege Escalation in operations API in Canonical LXD 6.5 on multiple platforms allows attacker with read permissions to hijack terminal or console sessions and execute arbitrary commands via WebSocket connection hijacking format...

CVE-2025-54289 Privilege Escalation via WebSocket Connection Hijacking in LXD Operations API

Privilege Escalation in operations API in Canonical LXD 6.5 on multiple platforms allows attacker with read permissions to hijack terminal or console sessions and execute arbitrary commands via WebSocket connection hijacking format...