EUVD-2023-43118

Malicious code in bioql PyPI...

EUVD-2022-25020

Malicious code in bioql PyPI...

EUVD-2022-4466

Malicious code in bioql PyPI...

EUVD-2025-25421

Malicious code in bioql PyPI...

EUVD-2024-54839

Malicious code in bioql PyPI...

EUVD-2025-25495

Malicious code in bioql PyPI...

EUVD-2025-26877

Malicious code in bioql PyPI...

EUVD-2025-20080

Malicious code in bioql PyPI...

EUVD-2025-29041

Malicious code in bioql PyPI...

EUVD-2023-12487

Malicious code in bioql PyPI...

EUVD-2022-7774

Malicious code in bioql PyPI...

EUVD-2024-27076

Malicious code in bioql PyPI...

EUVD-2022-28579

Malicious code in bioql PyPI...

EUVD-2022-45110

Malicious code in bioql PyPI...

Improper Verification of Cryptographic Signature

Overview portage is a Portage is the package management and distribution system for Gentoo Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature in the checkfilesignaturegpgunwrapped function. Due to the lack of enforcing of the presence of VALIDSIG...

NiceHash QuickMiner 安全漏洞

NiceHash QuickMiner is a cryptocurrency miner software open source by NiceHash.com. A security vulnerability exists in NiceHash QuickMiner version 6.12.0 that originates from executing a software update over HTTP without verifying digital signatures or hash checking, which could lead to remote co...

DEBIAN-CVE-2025-59420

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.4, Authlib’s JWS verification accepts tokens that declare unknown critical header parameters crit, violating RFC 7515 “must‑understand” semantics. An attacker can craft a signed token with a critical...

CVE-2025-10035

A deserialization vulnerability in the License Servlet of Fortra's GoAnywhere MFT allows an actor with a validly forged license response signature to deserialize an arbitrary actor-controlled object, possibly leading to command injection...

CVE-2025-10035 Deserialization Vulnerability in GoAnywhere MFT's License Servlet

A deserialization vulnerability in the License Servlet of Fortra's GoAnywhere MFT allows an actor with a validly forged license response signature to deserialize an arbitrary actor-controlled object, possibly leading to command injection...

grub2: commands/dump: The dump command is not in lockdown when secure boot is enabled

A flaw was found in grub2. Grub's dump command is not blocked when grub is in lockdown mode, which allows the user to read any memory information, and an attacker may leverage this in order to extract signatures, salts, and other sensitive information from the memory...