EUVD-2021-27665

Malicious code in bioql PyPI...

EUVD-2022-38635

Malicious code in bioql PyPI...

EUVD-2021-30179

Malicious code in bioql PyPI...

EUVD-2022-31484

Malicious code in bioql PyPI...

EUVD-2025-28767

Malicious code in bioql PyPI...

EUVD-2025-28797

Malicious code in bioql PyPI...

EUVD-2025-23817

Malicious code in bioql PyPI...

EUVD-2025-30921

Malicious code in bioql PyPI...

Kicking off Cybersecurity Awareness Month 2025: Researcher spotlights and enhanced incentives

October marks Cybersecurity Awareness Month, a time when the developer community reflect on the importance of security in the evolving digital landscape. At GitHub, we understand that protecting the global software ecosystem relies on the commitment, skill, and ingenuity of the security research...

CVE-2025-54081

Sunshine is a self-hosted game stream host for Moonlight. Prior to version 2025.923.33222, the Windows service SunshineService is installed with an unquoted executable path. If Sunshine is installed in a directory whose name includes a space, the Service Control Manager SCM interprets the path...

CVE-2025-54081

Sunshine is a self-hosted game stream host for Moonlight. Prior to version 2025.923.33222, the Windows service SunshineService is installed with an unquoted executable path. If Sunshine is installed in a directory whose name includes a space, the Service Control Manager SCM interprets the path...

OMRON SOCIAL SOLUTIONS Uninterruptible Power Supply (UPS) management application registers a Windows service with an unquoted file path

Overview Uninterruptible Power Supply UPS management application provided by OMRON SOCIAL SOLUTIONS Co., Ltd. registers a Windows service with an unquoted file path CWE-428, CVE-2025-9818. OMRON SOCIAL SOLUTIONS Co., Ltd. reported this vulnerability to JPCERT/CC to notify users of its solution...

CVE-2025-9818

A vulnerability CWE-428 has been identified in the Uninterruptible Power Supply UPS management application provided by OMRON SOCIAL SOLUTIONS Co., Ltd., where the executable file paths of Windows services are not enclosed in quotation marks. If the installation folder path of this product contain...

CVE-2025-9818

A vulnerability CWE-428 has been identified in the Uninterruptible Power Supply UPS management application provided by OMRON SOCIAL SOLUTIONS Co., Ltd., where the executable file paths of Windows services are not enclosed in quotation marks. If the installation folder path of this product contain...

CVE-2025-9818 Vulnerability caused by unquoted file paths of Windows services registered by the Uninterruptible Power Supply (UPS) management application

A vulnerability CWE-428 has been identified in the Uninterruptible Power Supply UPS management application provided by OMRON SOCIAL SOLUTIONS Co., Ltd., where the executable file paths of Windows services are not enclosed in quotation marks. If the installation folder path of this product contain...

CVE-2025-9818 Vulnerability caused by unquoted file paths of Windows services registered by the Uninterruptible Power Supply (UPS) management application

A vulnerability CWE-428 has been identified in the Uninterruptible Power Supply UPS management application provided by OMRON SOCIAL SOLUTIONS Co., Ltd., where the executable file paths of Windows services are not enclosed in quotation marks. If the installation folder path of this product contain...

CVE-2025-9818

CVE-2025-9818 describes a CWE-428 issue in the UPS management application from OMRON SOCIAL SOLUTIONS Co., Ltd. where Windows service executable paths are not quoted, enabling potential unauthorized file execution with service privileges if the install path contains spaces. Supported by multiple ...

PT-2025-38109

Name of the Vulnerable Software and Affected Versions: OMRON SOCIAL SOLUTIONS Co., Ltd. UPS management application affected versions not specified Description: The Uninterruptible Power Supply UPS management application is susceptible to a flaw where executable file paths for Windows services are...

Important: Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.23.0 Release.

Red Hat OpenShift Dev Spaces 3.23.0 has been released. Red Hat OpenShift Dev Spaces provides a cloud developer workspace server and a browser-based IDE built for teams and organizations. Dev Spaces runs in OpenShift and is well-suited for container-based development. The 3.23 release is based on...

Kibana 9.0.x < 9.0.6 / 9.1.x < 9.1.3 Incorrect Authorization (ESA-2025-13)

The version of Kibana running on the remote host is prior to 9.0 prior to 9.0.6 or 9.1 prior to 9.1.3. It is, therefore, a vulnerability as referenced in the ESA-2025-13 advisory. - Incorrect authorization in Kibana can lead to privilege escalation via the built-in reportinguser role which...