EUVD-2024-41532

Malicious code in bioql PyPI...

EUVD-2022-48297

Malicious code in bioql PyPI...

EUVD-2022-48295

Malicious code in bioql PyPI...

EUVD-2022-38841

Malicious code in bioql PyPI...

EUVD-2022-32646

Malicious code in bioql PyPI...

EUVD-2022-5789

Malicious code in bioql PyPI...

EUVD-2025-19701

Malicious code in bioql PyPI...

EUVD-2021-29071

Malicious code in bioql PyPI...

EUVD-2024-0646

Malicious code in bioql PyPI...

CVE-2025-44012

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We hav...

BELL-CVE-2025-39913

Bulletin has no description...

BELL-CVE-2025-39927

Bulletin has no description...

The vulnerability of software for discrete event simulation and automation in Rockwell Automation Arena lies in insufficient validation of input data, allowing a perpetrator to execute arbitrary code.

The vulnerability of software for discrete event simulation and automation in Rockwell Automation Arena is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Unity Runtime 参数注入漏洞

Unity Runtime is an underlying system responsible for executing logic, rendering, physics and interaction from Unity, Inc. in the United States. A parameter injection vulnerability exists in versions of Unity Runtime prior to 2025-10-02, which stems from a parameter injection that could lead to t...

BELL-CVE-2023-53514

Bulletin has no description...

BELL-CVE-2023-53513

Bulletin has no description...

DEBIAN-CVE-2022-50438

In the Linux kernel, the following vulnerability has been resolved: net: hinic: fix memory leak when reading function table When the input parameter idx meets the expected case option in hinicdbggetfunctable, readdata is not released. Fix it...

CVE-2025-56571

Finance.js v4.1.0 contains a Denial of Service DoS vulnerability via the IRR function’s depth parameter. Improper handling of the recursion/iteration limit can lead to excessive CPU usage, causing application stalls or crashes...

From Trace to Line: LLM Agent for Real-World OSS Vulnerability Localization

Large language models show promise for vulnerability discovery, yet prevailing methods inspect code in isolation, struggle with long contexts, and focus on coarse function- or file-level detections - offering limited actionable guidance to engineers who need precise line-level localization and...

Security Bulletin:IBM Event Streams is vulnerable to Regular Expression Denial of Service (ReDoS) ( CVE-2025-1302).

Summary IBM Event Streams is vulnerable to Regular Expression Denial of Service ReDoS caused by Inefficient Regular Expression Complexity. This issue affects JavaScript code that is compiled using certain versions of Babel . Babel is a JavaScript transcompiler used for converting modern JavaScrip...