EUVD-2022-43072

Malicious code in bioql PyPI...

EUVD-2025-27162

Malicious code in bioql PyPI...

EUVD-2024-52652

Malicious code in bioql PyPI...

EUVD-2024-18128

Malicious code in bioql PyPI...

EUVD-2025-31584

Malicious code in bioql PyPI...

EUVD-2024-18126

Malicious code in bioql PyPI...

EUVD-2024-49244

Malicious code in bioql PyPI...

EUVD-2023-27863

Malicious code in bioql PyPI...

CISA Adds Five Known Exploited Vulnerabilities to Catalog

CISA has added five new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2014-6278link is external GNU Bash OS Command Injection Vulnerability CVE-2015-7755link is external Juniper ScreenOS Improper Authentication Vulnerability...

Command Injection

Overview portage is a Portage is the package management and distribution system for Gentoo Affected versions of this package are vulnerable to Command Injection due to evaluating untrusted timestamp fields in a Bash arithmetic context via command substitution. The bin/emerge-webrsync functions...

A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue may lead to memory problems.

...

GNU Bash OS Command Injection Vulnerability

GNU Bash contains an OS command injection vulnerability which allows remote attackers to execute arbitrary commands via a crafted environment...

SUSE CVE-2025-61659

bash-git-prompt 2.6.1 through 2.7.1 insecurely uses the /tmp/git-index-private$$ file, which has a predictable name...

CVE-2025-61659

bash-git-prompt 2.6.1 through 2.7.1 insecurely uses the /tmp/git-index-private$$ file, which has a predictable name...

CVE-2025-61659

bash-git-prompt 2.6.1 through 2.7.1 insecurely uses the /tmp/git-index-private$$ file, which has a predictable name...

CVE-2025-61659

bash-git-prompt 2.6.1 through 2.7.1 insecurely uses the /tmp/git-index-private$$ file, which has a predictable name...

CVE-2025-61659

bash-git-prompt 2.6.1 through 2.7.1 insecurely uses the /tmp/git-index-private$$ file, which has a predictable name...

Informative git prompt for bash and fish 安全漏洞

Informative git prompt for bash and fish is a bash prompt for Git users from the personal developer Martin Gondermann. A security vulnerability exists in Informative git prompt for bash and fish 2.7.1 and prior versions, which stems from a predictable filename in /tmp/git-index-private$$ that cou...

CVE-2025-61659

CVE-2025-61659 affects bash-git-prompt versions 2.6.1 through 2.7.1. The root cause is insecure handling of a temporary file in /tmp, using a filename with a predictable pattern (/tmp/git-index-private$$). This can enable unsafe operations due to filename predictability. OpenSUSE/SUSE advisories ...

PT-2025-39840

Name of the Vulnerable Software and Affected Versions bash-git-prompt versions 2.6.1 through 2.7.1 Description The software uses the /tmp/git-index-private$$ file in a manner that results in a predictable filename. Recommendations Update to a version later than 2.7.1...