2172 matches found
EUVD-2023-44021
Malicious code in bioql PyPI...
EUVD-2022-32003
Malicious code in bioql PyPI...
EUVD-2025-19869
Malicious code in bioql PyPI...
EUVD-2023-58904
Malicious code in bioql PyPI...
EUVD-2022-45079
Malicious code in bioql PyPI...
EUVD-2025-19871
Malicious code in bioql PyPI...
EUVD-2023-48191
Malicious code in bioql PyPI...
EUVD-2023-43931
Malicious code in bioql PyPI...
EUVD-2022-42588
Malicious code in bioql PyPI...
EUVD-2022-29926
Malicious code in bioql PyPI...
EUVD-2022-44532
Malicious code in bioql PyPI...
EUVD-2021-8008
Malicious code in bioql PyPI...
EUVD-2025-16439
Malicious code in bioql PyPI...
EUVD-2021-29741
Malicious code in bioql PyPI...
RLSA-2025:7458 Important: xorg-x11-server-Xwayland security update
Xwayland is an X server for running X clients under Wayland. Security Fixes: xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability CVE-2024-9632 X.Org: Xwayland: Use-after-free of the root cursor CVE-2025-26594 xorg: xwayland: Use-after-free in SyncInitTrigger...
AZL-68193 CVE-2025-11234 affecting package qemu for versions less than 8.2.0-23
A flaw was found in QEMU. If the QIOChannelWebsock object is freed while it is waiting to complete a handshake, a GSource is leaked. This can lead to the callback firing later on and triggering a use-after-free in the use of the channel. This can be abused by a malicious client with network acces...
AZL-68202 CVE-2025-11234 affecting package qemu for versions less than 6.2.0-25
A flaw was found in QEMU. If the QIOChannelWebsock object is freed while it is waiting to complete a handshake, a GSource is leaked. This can lead to the callback firing later on and triggering a use-after-free in the use of the channel. This can be abused by a malicious client with network acces...
UBUNTU-CVE-2025-11234
A flaw was found in QEMU. If the QIOChannelWebsock object is freed while it is waiting to complete a handshake, a GSource is leaked. This can lead to the callback firing later on and triggering a use-after-free in the use of the channel. This can be abused by a malicious client with network acces...
CVE-2025-11234
Summary (CVE-2025-11234) : A flaw in QEMU allows a use-after-free via the QIOChannelWebsock object during handshake when freed, enabling a network-adjacent attacker to cause denial of service on the VNC WebSocket port before authentication. Affected component is the QEMU WebSocket handshake flow;...
CVE-2025-11234 Qemu-kvm: vnc websocket handshake use-after-free
A flaw was found in QEMU. If the QIOChannelWebsock object is freed while it is waiting to complete a handshake, a GSource is leaked. This can lead to the callback firing later on and triggering a use-after-free in the use of the channel. This can be abused by a malicious client with network acces...