EUVD-2023-42972

Malicious code in bioql PyPI...

EUVD-2024-2237

Malicious code in bioql PyPI...

EUVD-2024-1274

Malicious code in bioql PyPI...

EUVD-2025-27912

Malicious code in bioql PyPI...

EUVD-2025-32164

Malicious code in bioql PyPI...

EUVD-2022-35580

Malicious code in bioql PyPI...

CVE-2025-9209: Exposure of Sensitive Information to an Unauthorized Actor

The RestroPress – Online Food Ordering System plugin for WordPress is vulnerable to Authentication Bypass in versions 3.0.0 to 3.1.9.2. This is due to the plugin exposing user private tokens and API data via the /wp-json/wp/v2/users REST API endpoint. This makes it possible for unauthenticated...

Malicious code in coder-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39c2ddf9a60ebc68bffd364ac4fda53541ff6d6967a0fc5344e4d082f207aa27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview coder-v2 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malware in coder-v2

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-47881 Malicious code in coder-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39c2ddf9a60ebc68bffd364ac4fda53541ff6d6967a0fc5344e4d082f207aa27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Integer Overflow lead to DOS in API `v2/models/<model-name>/infer`

This report is not public...

CVE-2023-53501

No public technical details about CVE-2023-53501 were found in the provided connected documents. The initial description mentions a Linux kernel fix for PASID refcount with no vendor/affected-version specifics or mitigations. Monitor for updates.

CVE-2025-56762

Paracrawl KeOPs v2 is vulnerable to Cross Site Scripting XSS in error.php...

CVE-2025-56762

Paracrawl KeOPs v2 is vulnerable to Cross Site Scripting XSS in error.php...

CVE-2025-56762

Paracrawl KeOPs v2 is vulnerable to Cross Site Scripting XSS in error.php...

CVE-2022-50402: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: drivers/md/md-bitmap: check the return value of mdbitmapgetcounter Check the return value of mdbitmapgetcounter in case it returns NULL pointer, which will result in a null pointer dereference. v2: update the check to include oth...

UBUNTU-CVE-2023-53364

In the Linux kernel, the following vulnerability has been resolved: regulator: da9063: better fix null deref with partial DT Two versions of the original patch were sent but V1 was merged instead of V2 due to a mistake. So update to V2. The advantage of V2 is that it completely avoids dereferenci...

CVE-2023-53364 regulator: da9063: better fix null deref with partial DT

In the Linux kernel, the following vulnerability has been resolved: regulator: da9063: better fix null deref with partial DT Two versions of the original patch were sent but V1 was merged instead of V2 due to a mistake. So update to V2. The advantage of V2 is that it completely avoids dereferenci...

CVE-2023-53364: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: regulator: da9063: better fix null deref with partial DT Two versions of the original patch were sent but V1 was merged instead of V2 due to a mistake. So update to V2. The advantage of V2 is that it completely avoids dereferenci...