EUVD-2025-25225

Malicious code in bioql PyPI...

EUVD-2022-6369

Malicious code in bioql PyPI...

AZL-68664 CVE-2025-46817 affecting package compat-lua 5.1.5-17

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to cause an integer overflow and potentially lead to remote code execution The problem exists in all versions of Redis with Lua scripting...

CVE-2025-61593 Cursor CLI Agent: Sensitive File Overwrite Bypass

Cursor is a code editor built for programming with AI. In versions 1.7 and below, a vulnerability in the way Cursor CLI Agent protects its sensitive files i.e. /.cursor/cli.json allows attackers to modify the content of the files through prompt injection, thus achieving remote code execution. A...

CVE-2025-8851 affecting package libtiff for versions less than 4.6.0-8

CVE-2025-8851 affecting package libtiff for versions less than 4.6.0-8. A patched version of the package is available...

CVE-2025-47906 affecting package golang for versions less than 1.22.7-5

CVE-2025-47906 affecting package golang for versions less than 1.22.7-5. A patched version of the package is available...

CVE-2025-5889 affecting package nodejs18 for versions less than 18.20.3-9

CVE-2025-5889 affecting package nodejs18 for versions less than 18.20.3-9. A patched version of the package is available...

CVE-2025-3770 affecting package hvloader for versions less than 1.0.1-14

CVE-2025-3770 affecting package hvloader for versions less than 1.0.1-14. A patched version of the package is available...

CVE-2025-4674 affecting package golang for versions less than 1.22.7-5

CVE-2025-4674 affecting package golang for versions less than 1.22.7-5. A patched version of the package is available...

CVE-2024-33394 affecting package kubevirt for versions less than 0.59.0-30

CVE-2024-33394 affecting package kubevirt for versions less than 0.59.0-30. A patched version of the package is available...

CVE-2025-5918 affecting package libarchive for versions less than 3.6.1-7

CVE-2025-5918 affecting package libarchive for versions less than 3.6.1-7. A patched version of the package is available...

CVE-2025-4673 affecting package golang for versions less than 1.22.7-5

CVE-2025-4673 affecting package golang for versions less than 1.22.7-5. A patched version of the package is available...

CVE-2025-47907 affecting package golang for versions less than 1.22.7-5

CVE-2025-47907 affecting package golang for versions less than 1.22.7-5. A patched version of the package is available...

CVE-2025-8176 affecting package libtiff for versions less than 4.6.0-8

CVE-2025-8176 affecting package libtiff for versions less than 4.6.0-8. A patched version of the package is available...

CVE-2025-24294 affecting package ruby for versions less than 3.1.7-3

CVE-2025-24294 affecting package ruby for versions less than 3.1.7-3. A patched version of the package is available...

CVE-2025-22872 affecting package cri-tools for versions less than 1.29.0-8

CVE-2025-22872 affecting package cri-tools for versions less than 1.29.0-8. A patched version of the package is available...

CVE-2024-50612 affecting package libsndfile for versions less than 1.0.31-4

CVE-2024-50612 affecting package libsndfile for versions less than 1.0.31-4. A patched version of the package is available...

CVE-2025-8836 affecting package jasper for versions less than 2.0.32-5

CVE-2025-8836 affecting package jasper for versions less than 2.0.32-5. A patched version of the package is available...

CVE-2025-54349 affecting package iperf3 for versions less than 3.18-2

CVE-2025-54349 affecting package iperf3 for versions less than 3.18-2. A patched version of the package is available...

AZL-68202 CVE-2025-11234 affecting package qemu for versions less than 6.2.0-25

A flaw was found in QEMU. If the QIOChannelWebsock object is freed while it is waiting to complete a handshake, a GSource is leaked. This can lead to the callback firing later on and triggering a use-after-free in the use of the channel. This can be abused by a malicious client with network acces...