CVE-2026-12246: Buffer Copy without Checking Size of Input

NSD version 4.14.0 introduced a bug where a specially crafted APL RR, with an adflength larger than permitted for the address family will overwrite the stack when the zone is written to disk, with a maximum of 111 attacker controlled bytes...

PT-2026-52211

Name of the Vulnerable Software and Affected Versions NSD version 4.14.0 Description A memory corruption flaw exists when handling APL Address Prefix List resource records during the process of serializing or writing a zone to disk. The issue stems from improper input validation and bounds checki...

Malicious code in apl-github-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc746d95b286b0c3dde3aa7d5d3287da638b8a02ceed430f372112f1f563686a The package apl-github-test was found to contain malicious code...

MAL-2026-2729 Malicious code in apl-github-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc746d95b286b0c3dde3aa7d5d3287da638b8a02ceed430f372112f1f563686a The package apl-github-test was found to contain malicious code...

MAL-2026-2728 Malicious code in apl-announcements (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f5e32781749c59464ed1f8d649c60102886b11838297e856aeaa3be42ed15f1 The package apl-announcements was found to contain malicious code...

Malicious code in apl-announcements (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f5e32781749c59464ed1f8d649c60102886b11838297e856aeaa3be42ed15f1 The package apl-announcements was found to contain malicious code...

MiracleLinux 7 : bind-9.9.4-29.1.0.2.el7.AXS7 (AXSA:2016-048:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2016-048:01 advisory. CVE-2015-8704: Specific APL data could trigger an INSIST in apl42.c A buffer size check used to guard against overflow could cause named to exit with an INSIS...

EUVD-2025-15711

Malicious code in bioql PyPI...

Malicious code in @zalastax/nolb-apl (npm)

The package @zalastax/nolb-apl was found to contain malicious code...

MAL-2025-10689 Malicious code in @zalastax/nolb-apl (npm)

The package @zalastax/nolb-apl was found to contain malicious code...

CVE-2025-4905

A vulnerability was found in iop-apl-uw basestation3 up to 3.0.4 and classified as problematic. This issue affects the function loadqcpickl of the file basestation3/QC.py. The manipulation of the argument qcfile leads to deserialization. An attack has to be approached locally. The exploit has bee...

CVE-2025-4905

A vulnerability was found in iop-apl-uw basestation3 up to 3.0.4 and classified as problematic. This issue affects the function loadqcpickl of the file basestation3/QC.py. The manipulation of the argument qcfile leads to deserialization. An attack has to be approached locally. The exploit has bee...

CVE-2025-4905

A vulnerability was found in iop-apl-uw basestation3 up to 3.0.4 and classified as problematic. This issue affects the function loadqcpickl of the file basestation3/QC.py. The manipulation of the argument qcfile leads to deserialization. An attack has to be approached locally. The exploit has bee...

CVE-2025-4905 iop-apl-uw basestation3 QC.py load_qc_pickl deserialization

A vulnerability was found in iop-apl-uw basestation3 up to 3.0.4 and classified as problematic. This issue affects the function loadqcpickl of the file basestation3/QC.py. The manipulation of the argument qcfile leads to deserialization. An attack has to be approached locally. The exploit has bee...

CVE-2025-4905 iop-apl-uw basestation3 QC.py load_qc_pickl deserialization

A vulnerability was found in iop-apl-uw basestation3 up to 3.0.4 and classified as problematic. This issue affects the function loadqcpickl of the file basestation3/QC.py. The manipulation of the argument qcfile leads to deserialization. An attack has to be approached locally. The exploit has bee...

CVE-2025-4905

The CVE-2025-4905 issue affects iop-apl-uw basestation3 up to version 3.0.4, specifically the load_qc_pickl function in basestation3/QC.py. The vulnerability stems from deserialization triggered by manipulating the qc_file argument, requiring local access. Public exploit details exist, and the pr...

CVE-2025-4905: Deserialization of Untrusted Data

A vulnerability was found in iop-apl-uw basestation3 up to 3.0.4 and classified as problematic. This issue affects the function loadqcpickl of the file basestation3/QC.py. The manipulation of the argument qcfile leads to deserialization. An attack has to be approached locally. The exploit has bee...

PT-2025-21874 · Unknown · Iop-Apl-Uw Basestation3

Name of the Vulnerable Software and Affected Versions: iop-apl-uw basestation3 versions 3.0.4 and earlier Description: A problem was found in the load qc pickl function of the file basestation3/QC.py, which is affected by deserialization due to the manipulation of the qc file argument. This issue...

Malicious code in apl-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c9d01a1289fd5e02d94728d6b0a19ec77687aadfde1e9807050227a0de03dc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1568 Malicious code in apl-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c9d01a1289fd5e02d94728d6b0a19ec77687aadfde1e9807050227a0de03dc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...