EUVD-2025-27243

Malicious code in bioql PyPI...

EUVD-2025-28096

Malicious code in bioql PyPI...

EUVD-2025-28353

Malicious code in bioql PyPI...

EUVD-2025-26070

Malicious code in bioql PyPI...

EUVD-2025-24094

Malicious code in bioql PyPI...

EUVD-2025-27687

Malicious code in bioql PyPI...

EUVD-2025-30215

Malicious code in bioql PyPI...

CVE-2025-52656

HCL MyXalytics: 6.6. is affected by Mass Assignment vulnerability. Mass Assignment occurs when user input is automatically bound to application objects without proper validation or access controls, potentially allowing unauthorized modification of sensitive fields...

CVE-2025-52654 HCL MyXalytics is affected by an HTML Injection

HCL MyXalytics v6.6 is affected by an HTML Injection. This issue occurs when untrusted input is included in the output without proper handling, potentially allowing unauthorized content injection and manipulation...

PT-2025-40573

Name of the Vulnerable Software and Affected Versions HCL MyXalytics version 6.6 Description A flaw exists in HCL MyXalytics that permits HTML injection. This could potentially allow an attacker to inject malicious HTML code into the application. Recommendations At the moment, there is no...

PT-2025-40574

Name of the Vulnerable Software and Affected Versions HCL MyXalytics version 6.6 Description The software is susceptible to a Mass Assignment issue. This happens when user-supplied data is automatically mapped to application objects without sufficient validation or access controls, potentially...

CVE-2025-54292 Client-Side Path Traversal in LXD-UI

Path traversal in Canonical LXD LXD-UI versions before 6.5 and 5.21.4 on all platforms allows remote authenticated attackers to access or modify unintended resources via crafted resource names embedded in URL paths...

FrostWire 安全漏洞

FrostWire is a P2P file sharing client from the FrostWire open source. A security vulnerability exists in FrostWire version 6.14.0-build-326, which stems from an overly generous permission setting that could lead to code injection and elevation of privilege...

LXD 安全漏洞

LXD is a Canonical open source container for managing applications on Linux-based systems. A security vulnerability exists in LXD versions prior to 6.5 and 5.21.4, which stems from an unauthenticated image export API that could lead to information disclosure...

PT-2025-40429

Name of the Vulnerable Software and Affected Versions Traccar versions 5.8 through 6.0 Traccar versions 6.1 through 6.8.1 Description Traccar, an open source GPS tracking system, has a flaw that allows for unauthenticated local file inclusion attacks. This can result in the disclosure of password...

CVE-2025-38500 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38500 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38472 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38472 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38568 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38568 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38474 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38474 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-53477 ipv6: Add lwtunnel encap size of all siblings in nexthop calculation

In the Linux kernel, the following vulnerability has been resolved: ipv6: Add lwtunnel encap size of all siblings in nexthop calculation In function rt6nlmsgsize, the length of nexthop is calculated by multipling the nexthop length of fib6info and the number of siblings. However if the fib6info h...