EUVD-2025-22352

Malicious code in bioql PyPI...

EUVD-2023-43075

Malicious code in bioql PyPI...

EUVD-2023-56311

Malicious code in bioql PyPI...

EUVD-2025-14329

Malicious code in bioql PyPI...

EUVD-2022-0498

Malicious code in bioql PyPI...

EUVD-2023-2920

Malicious code in bioql PyPI...

EUVD-2025-20431

Malicious code in bioql PyPI...

EUVD-2023-34314

Malicious code in bioql PyPI...

EUVD-2023-28326

Malicious code in bioql PyPI...

EUVD-2022-40066

Malicious code in bioql PyPI...

EUVD-2022-29161

Malicious code in bioql PyPI...

EUVD-2023-37360

Malicious code in bioql PyPI...

EUVD-2022-5967

Malicious code in bioql PyPI...

Researchers Warn of Self-Spreading WhatsApp Malware Named SORVEPOTEL

Brazilian users have emerged as the target of a new self-propagating malware dubbed SORVEPOTEL that spreads via the popular messaging app WhatsApp. The campaign, codenamed Water Saci by Trend Micro, weaponizes the trust with the platform to extend its reach across Windows systems, adding the atta...

GHSA-MJQP-26HC-GRXG Picklescan: ZIP archive scan bypass is possible through non-exhaustive Cyclic Redundancy Check

Summary Picklescan's ability to scan ZIP archives for malicious pickle files is compromised when the archive contains a file with a bad Cyclic Redundancy Check CRC. Instead of attempting to scan the files within the archive, whatever the CRC is, Picklescan fails in error and returns no results...

Linux Distros Unpatched Vulnerability : CVE-2021-4217

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows ...

MixShell Malware Delivered via Contact Forms Targets U.S. Supply Chain Manufacturers

Cybersecurity researchers are calling attention to a sophisticated social engineering campaign that's targeting supply chain-critical manufacturing companies with an in-memory malware dubbed MixShell. The activity has been codenamed ZipLine by Check Point Research. "Instead of sending unsolicited...

Malicious code in down-load-available-zip-now-47073-anita-qnknl-xgxkin (npm)

The package down-load-available-zip-now-47073-anita-qnknl-xgxkin was found to contain malicious code...

Malicious code in down-load-available-zip-now-242367-fad-bpemi-awgouw (npm)

The package down-load-available-zip-now-242367-fad-bpemi-awgouw was found to contain malicious code...

CVE-2011-10016

CVE-2011-10016 affects Real Networks Netzip Classic 7.5.1.86. A stack-based buffer overflow occurs while parsing a specially crafted ZIP archive, triggered by a file name exceeding the expected buffer size. Exploitation allows arbitrary code execution under the victim user's context when the ZIP ...