EUVD-2025-20864

Malicious code in bioql PyPI...

EUVD-2025-31022

Malicious code in bioql PyPI...

EUVD-2023-32695

Malicious code in bioql PyPI...

EUVD-2022-0623

Malicious code in bioql PyPI...

EUVD-2022-0632

Malicious code in bioql PyPI...

EUVD-2025-18118

Malicious code in bioql PyPI...

EUVD-2022-55563

Malicious code in bioql PyPI...

EUVD-2022-4886

Malicious code in bioql PyPI...

EUVD-2022-7637

Malicious code in bioql PyPI...

EUVD-2025-7804

Malicious code in bioql PyPI...

EUVD-2022-4149

Malicious code in bioql PyPI...

EUVD-2025-5169

Malicious code in bioql PyPI...

EUVD-2022-55252

Malicious code in bioql PyPI...

EUVD-2025-25576

Malicious code in bioql PyPI...

EUVD-2025-26085

Malicious code in bioql PyPI...

kernel security update

An update is available for kernel. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

RLSA-2025:8137 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: media: uvcvideo: Skip parsing frames of type UVCVSUNDEFINED in uvcparseformat CVE-2024-53104 kernel: vsock: Keep the binding until socket destruction CVE-2025-21756 For more details about...

NiceGUI has a Reflected XSS

Summary A Cross-Site Scripting XSS risk exists in NiceGUI when developers render unescaped user input into the DOM using ui.html. Before version 3.0, NiceGUI does not enforce HTML or JavaScript sanitization, so applications that directly combine components like ui.input with ui.html without...

HCL MyXalytics 安全漏洞

HCL MyXalytics is an analytics software product from HCL India. It is used to perform data analysis and other related tasks. A security vulnerability exists in HCL MyXalytics version 6.6, which stems from a lack of proper validation and access control when automatically binding user inputs to...

PT-2025-40597

Name of the Vulnerable Software and Affected Versions OpenSupports versions 4.11.0 Description The application’s API endpoint, /api/staff/get-new-tickets, directly incorporates the user-supplied parameter departmentId into a SQL query without proper sanitization. This allows an authenticated staf...