EUVD-2022-7305

Malicious code in bioql PyPI...

EUVD-2024-2731

Malicious code in bioql PyPI...

EUVD-2024-2685

Malicious code in bioql PyPI...

EUVD-2023-2001

Malicious code in bioql PyPI...

EUVD-2025-10290

Malicious code in bioql PyPI...

Advisory ROSA-SA-2025-3027

software: jasper 2.0.33 WASP: ROSA-CHROME unaffected versions = jasper-2.0.33-2 affected versions jasper-2.0.33-2 CVE-ID: CVE-2025-8835 BDU-ID: None CVE-Crit: LOW CVE-DESC.: A vulnerability in JasPer before version 4.2.5 allows a crash due to null pointer dereferencing in the jasimagechclrspc...

PT-2025-39450

Name of the Vulnerable Software and Affected Versions TOTOLINK X6000R versions through V9.4.0cu.1458 B20250708 Description A flaw exists in TOTOLINK X6000R that allows for OS Command Injection due to improper neutralization of special elements used in an OS command. This could allow an attacker t...

PT-2025-38279

Name of the Vulnerable Software and Affected Versions: Frappe Learning versions 2.34.1 and below Description: Frappe Learning does not adequately sanitize content uploaded in the profile bio. This allows for the execution of arbitrary scripts in the context of other users through malicious SVG...

PT-2025-38230

Name of the Vulnerable Software and Affected Versions: Thorium versions prior to 1.1.1 Description: Thorium does not escape user-controlled strings used in LDAP queries. An authenticated remote attacker can modify LDAP authorization data, such as group memberships. Recommendations: Update to...

GHSA-286P-VC9P-P5QV [email protected] contains malware after npm account takeover

Impact On 8 September 2025, the npm publishing account for color-string was taken over after a phishing attack. Version 2.1.1 was published, functionally identical to the previous patch version, but with a malware payload added attempting to redirect cryptocurrency transactions to the attacker's...

Slackware Linux 15.0 / current cups Multiple Vulnerabilities (SSA:2025-255-01)

The version of cups installed on the remote host is prior to 2.4.14. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-255-01 advisory. New cups packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the preceding...

Advisory ROSA-SA-2025-2998

software: libvpx 1.10.0 OS: ROSA-CHROME unaffected versions = libvpx-1.10.0-5 affected versions libvpx-1.10.0-5 CVE-ID: CVE-2024-5197 BDU-ID: 2024-04531 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the vpximgalloc function of the libvpx video encoding/decoding library is related to integer...

PT-2025-35661

Name of the Vulnerable Software and Affected Versions: Telephony versions prior to SMR Apr-2023 Release 1 Description: An improper access control issue exists in Telephony. This allows attackers to access files with escalated permission. Recommendations: Update Telephony to SMR Apr-2023 Release 1...

PT-2025-35556

Name of the Vulnerable Software and Affected Versions: E3 Site Supervisor Control versions prior to 2.31F01 Description: E3 Site Supervisor Control firmware version prior to 2.31F01 MGW contains an API call lacking input validation. An attacker can use this command to continuously crash the...

PT-2025-35260

Name of the Vulnerable Software and Affected Versions: File Station versions prior to 5.5.6.4907 Description: A NULL pointer dereference issue exists in File Station 5. A remote attacker gaining a user account can exploit this to launch a denial-of-service DoS attack. Recommendations: Update to...

Security Bulletin: IBM Guardium Data Protection is affected by an SQL Injection via username vulnerability (CVE-2024-55906).

Summary IBM Guardium Data Protection has addressed this vulnerability in an update. Vulnerability Details CVEID:CVE-2024-55906 DESCRIPTION: IBM Security Guardium is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view,...

PT-2025-34913 · Unknown · Simple Download Monitor

Name of the Vulnerable Software and Affected Versions: Simple Download Monitor versions through 3.9.34 Description: The software contains a cross-site scripting XSS issue due to improper neutralization of input during web page generation. This allows for stored XSS attacks. Recommendations: Updat...

PT-2025-34833 · Unknown · Printeers Print & Ship

Name of the Vulnerable Software and Affected Versions: Printeers Print & Ship versions through 1.17.0 Description: The software contains a path traversal flaw. An attacker can exploit this issue by utilizing a '.../...//' path to traverse directories. Recommendations: Update Printeers Print & Shi...

PT-2025-34769 · Mahara · Mahara

Name of the Vulnerable Software and Affected Versions: Mahara versions 23.04.8 and 24.04.4 Description: The external RSS feed block in Mahara can allow for cross-site scripting XSS if the external feed XML contains a malicious value for the link attribute. Recommendations: Update Mahara to a...

PT-2025-34783 · Kapsch Trafficcom · Ris-9160 +1

Name of the Vulnerable Software and Affected Versions: Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units RSUs versions 3.2.0.829.23, 3.8.0.1119.42, and 4.6.0.1211.28 Description: Kapsch TrafficCom RIS-9160 and RIS-9260 Roadside Units RSUs lack SPI Protected Range Registers PRRs. This allows...