EUVD-2025-26792

Malicious code in bioql PyPI...

EUVD-2023-27047

Malicious code in bioql PyPI...

EUVD-2025-7028

Malicious code in bioql PyPI...

EUVD-2023-1920

Malicious code in bioql PyPI...

EUVD-2024-0502

Malicious code in bioql PyPI...

CVE-2025-44012

CVE-2025-44012 affects QNAP Qsync Central. The root cause is an allocation of resources without limits or throttling, allowing a remote attacker with a valid user account to exhaust resources and block access for other systems, applications, or processes. Affected are Qsync Central versions prior...

CVE-2025-44007 Qsync Central

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We hav...

redis,valkey -- Out of bound read due to a bug in LUA

redis reports: An authenticated user may use a specially crafted LUA script to read out-of-bound data or crash the server and subsequent denial of service. The problem exists in all versions of Redis with Lua scripting An additional workaround to mitigate the problem without patching the...

PT-2025-39812

Name of the Vulnerable Software and Affected Versions Postie WordPress plugin versions prior to 1.9.71 Description The software does not properly sanitize and escape certain settings, potentially allowing users with high privileges, such as administrators, to carry out Stored Cross-Site Scripting...

SUSE-SU-2025:03271-1 Security update for busybox, busybox-links

This update for busybox, busybox-links fixes the following issues: Updated to version 1.37.0 jscPED-13039: - CVE-2023-42363: Fixed use-after-free vulnerability in xasprintf function in xfuncsprintf.c bsc1217580 - CVE-2023-42364: Fixed use-after-free in the awk.c evaluate function bsc1217584 -...

CVE-2025-43321

The issue was resolved by blocking unsigned services from launching on Intel Macs. This issue is fixed in macOS Sonoma 14.8, macOS Sequoia 15.7. An app may be able to access protected user data...

PT-2025-37825

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Sequoia 15.7 macOS versions prior to Sonoma 14.8 macOS versions prior to Tahoe 26 Description: An application may be able to access protected user data. The issue was resolved by blocking unsigned services from launchi...

PT-2025-49034

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to a livelock in synchronous file put operations from fuseblk workers. This issue can lead to a hang when running tests that involve opening a...

btrfs: do not allow relocation of partially dropped subvolumes

...

CVE-2025-39738

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not allow relocation of partially dropped subvolumes BUG There is an internal report that balance triggered transaction abort, with the following call trace: item 85 key 594509824 169 0 itemoff 12599 itemsize 33 extent...

PT-2025-37026

Name of the Vulnerable Software and Affected Versions: Maspik plugin for WordPress versions prior to 2.5.6 Description: The Maspik plugin for WordPress is susceptible to a missing authorization issue. This is caused by the absence of capability checks within the Maspik spamlog download csv...

Linux Distros Unpatched Vulnerability : CVE-2021-36396

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Moodle, insufficient redirect handling made it possible to blindly bypass cURL blocked hosts/allowed ports restrictions, resulting in a blind SSRF risk...

Metabase 0.41.x < 0.41.9 / 0.42.x < 0.42.6 / 0.43.x < 0.43.7 / 0.44.x < 0.44.5 / 1.41.x < 1.41.9 / 1.42.x < 1.42.6 / 1.43.x < 1.43.7 / 1.44.x < 1.44.5

The version of Metabase installed on the remote host affected by a single sign on SSO access control vulnerability which could allow a user access without going through the SSO IdP. Metabase now blocks password reset for all users who use SSO for their Metabase login. Note that Nessus has not...

CVE-2025-48581

In VerifyNoOverlapInSessions of apexd.cpp, there is a possible way to block security updates due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

IT threat evolution in Q2 2025. Non-mobile statistics

IT threat evolution in Q2 2025. Non-mobile statistics IT threat evolution in Q2 2025. Mobile statistics The statistics in this report are based on detection verdicts returned by Kaspersky products unless otherwise stated. The information was provided by Kaspersky users who consented to sharing...