EUVD-2023-26860

Malicious code in bioql PyPI...

EUVD-2022-26039

Malicious code in bioql PyPI...

EUVD-2023-0447

Malicious code in bioql PyPI...

EUVD-2025-5296

Malicious code in bioql PyPI...

EUVD-2025-19720

Malicious code in bioql PyPI...

EUVD-2021-32932

Malicious code in bioql PyPI...

EUVD-2024-45933

Malicious code in bioql PyPI...

Tenda AC6 V5.0 Firmware Signature Validation firmware update vulnerability

Talos Vulnerability Report TALOS-2025-2161 Tenda AC6 V5.0 Firmware Signature Validation firmware update vulnerability August 20, 2025 CVE Number CVE-2025-31355 SUMMARY A firmware update vulnerability exists in the Firmware Signature Validation functionality of Tenda AC6 V5.0 V02.03.01.110. A...

CVE-2025-8978

A vulnerability was determined in D-Link DIR-619L 6.02CN02. Affected is the function FirmwareUpgrade of the component boa. The manipulation leads to insufficient verification of data authenticity. It is possible to launch the attack remotely. The complexity of an attack is rather high. The...

CVE-2025-38352 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38352 affecting package kernel for versions less than 6.6.96.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38425 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38425 affecting package kernel for versions less than 6.6.96.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-50083 affecting package mysql for versions less than 8.0.43-1

CVE-2025-50083 affecting package mysql for versions less than 8.0.43-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-50099 affecting package mysql for versions less than 8.0.43-1

CVE-2025-50099 affecting package mysql for versions less than 8.0.43-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-48393

The server identity check mechanism for firmware upgrade performed via command shell is insecurely implemented potentially allowing an attacker to perform a Man-in-the-middle attack. This security issue has been fixed in the latest firmware version of Eaton G4 PDU which is available on the Eaton...

CVE-2025-53022

TrustedFirmware-M aka Trusted Firmware for M profile Arm CPUs before 2.1.3 and 2.2.x before 2.2.1 lacks length validation during a firmware upgrade. While processing a new image, the Firmware Upgrade FWU module does not validate the length field of the Type-Length-Value TLV structure for dependen...

CVE-2025-49812 Apache HTTP Server: mod_ssl TLS upgrade attack

In some modssl configurations on Apache HTTP Server versions through to 2.4.63, an HTTP desynchronisation attack allows a man-in-the-middle attacker to hijack an HTTP session via a TLS upgrade. Only configurations using "SSLEngine optional" to enable TLS upgrades are affected. Users are recommend...

CVE-2023-50967 affecting package jose for versions less than 14-3

CVE-2023-50967 affecting package jose for versions less than 14-3. An upgraded version of the package is available that resolves this issue...

CVE-2025-37767 affecting package kernel for versions less than 6.6.92.2-1

CVE-2025-37767 affecting package kernel for versions less than 6.6.92.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38575 affecting package kernel for versions less than 6.6.92.2-1

CVE-2025-38575 affecting package kernel for versions less than 6.6.92.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-37911 affecting package kernel for versions less than 6.6.92.2-1

CVE-2025-37911 affecting package kernel for versions less than 6.6.92.2-1. An upgraded version of the package is available that resolves this issue...