4165 matches found
EUVD-2023-34134
Malicious code in bioql PyPI...
EUVD-2023-31610
Malicious code in bioql PyPI...
EUVD-2022-51588
Malicious code in bioql PyPI...
EUVD-2025-1858
Malicious code in bioql PyPI...
EUVD-2025-16612
Malicious code in bioql PyPI...
EUVD-2025-8833
Malicious code in bioql PyPI...
EUVD-2021-7606
Malicious code in bioql PyPI...
EUVD-2025-18909
Malicious code in bioql PyPI...
EUVD-2022-27588
Malicious code in bioql PyPI...
EUVD-2025-20296
Malicious code in bioql PyPI...
EUVD-2023-34347
Malicious code in bioql PyPI...
EUVD-2022-24823
Malicious code in bioql PyPI...
CVE-2023-50300
IBM Transformation Extender Advanced 10.0.1 could allow a local user to perform unauthorized actions due to improper access controls...
[SECURITY] Fedora 42 Update: freeipa-4.12.5-2.fc42
IPA is an integrated solution to provide centrally managed Identity users, hosts, services, Authentication SSO, 2FA, and Authorization host access control, SELinux user roles, services. The solution provides features for further integration with Linux based clients SUDO, automount and integration...
redis,valkey -- Lua Use-After-Free may lead to remote code execution
redis reports: An authenticated user may use a specially crafted Lua script to manipulate the garbage collector, trigger a use-after-free and potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting. An additional workaround to mitigate the problem...
netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions
A flaw in Netty’s HTTP/1.1 chunked encoding parser allows newline LF characters in chunk extensions to be incorrectly treated as the end of the chunk-size line instead of requiring the proper CRLF sequence. This discrepancy can be exploited in rare cases where a reverse proxy interprets the same...
netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions
A flaw in Netty’s HTTP/1.1 chunked encoding parser allows newline LF characters in chunk extensions to be incorrectly treated as the end of the chunk-size line instead of requiring the proper CRLF sequence. This discrepancy can be exploited in rare cases where a reverse proxy interprets the same...
A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.
...
