EUVD-2019-5570

Malware in sbrugna...

ROS-20251006-15

A vulnerability in a library that provides basic functionality for data serialization and deserialization Jackson Core, is related to the fact that when parsing JSON from an array of bytes with offset and length, an exception message is erroneously read from the beginning of the array. exception...

EUVD-2024-38113

Malicious code in bioql PyPI...

EUVD-2023-43068

Malicious code in bioql PyPI...

EUVD-2025-4793

Malicious code in bioql PyPI...

EUVD-2024-48483

Malicious code in bioql PyPI...

EUVD-2025-14713

Malicious code in bioql PyPI...

EUVD-2025-10433

Malicious code in bioql PyPI...

ROS-20251001-04

A vulnerability in the gnutlsrnd function of the Samba networking software package is related to the use of insufficiently random values. insufficiently randomized values. Exploitation of the vulnerability could allow an attacker to gain access to confidential data...

Phantom Taurus: New China-Linked Hacker Group Hits Governments With Stealth Malware

Government and telecommunications organizations across Africa, the Middle East, and Asia have emerged as the target of a previously undocumented China-aligned nation-state actor dubbed Phantom Taurus over the past two-and-a-half years. "Phantom Taurus' main focus areas include ministries of forei...

Abusing Notion’s AI Agent for Data Theft

Notion just released version 3.0, complete with AI agents. Because the system contains Simon Willson's lethal trifecta, it's vulnerable to data theft though prompt injection. First, the trifecta: The lethal trifecta of capabilities is: Access to your private data --one of the most common purposes...

The vulnerability of the decode_utf8 function in the base/gp_utf8.c software component of the Ghostscript document processing software allows an attacker to access confidential data and compromise its integrity.

The vulnerability of the decodeutf8 function in the base/gputf8.c software component of the Ghostscript document processing software is related to deficiencies in checking the path name to the restricted-access directory. Exploiting this vulnerability could allow an attacker to gain access to...

The vulnerability of the drivers/s390 kernel component of the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Linux operating system’s S390 kernel driver components is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of Intel Microcode processors relates to the disclosure of information, which allows a perpetrator to gain access to confidential data.

The vulnerability of Intel Microcode processors relates to the disclosure of information. Exploiting this vulnerability can allow an intruder to gain access to confidential data...

The vulnerability of the read_arcobject() function in the read1_3.c component of the Fig2dev file conversion utility allows a hacker to gain access to confidential data and compromise its integrity.

The vulnerability of the readarcobject function in the read13.c component of the Fig2dev file conversion utility is related to pointer manipulation errors. Exploiting this vulnerability could allow an attacker to access confidential data and compromise its integrity...

The vulnerability of the Buildah container creation tool, related to errors in checking the path to the catalog, allows a perpetrator to gain access to confidential data.

The vulnerability of the Buildah container creation tool is related to errors in checking the path to the catalog. Exploiting this vulnerability could allow an attacker to gain access to confidential data...

The vulnerability of the parisc component in the Linux operating system’s kernel allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the parisc component in the Linux operating system’s kernel is related to errors during resource release. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the `depack_pha` function in the `loaders/prowizard/pha.c` library for playing music with Libxmp allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the depackpha function in the loaders/prowizard/pha.c library, which is used for playing music with Libxmp, involves a numerical loss of significance. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service...

The vulnerability of the RDMA/core component of the Linux operating system allows a hacker to gain access to confidential data and also cause a service failure.

The vulnerability of the RDMA/core component of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to access confidential data and also cause service failures...

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit, related to the manipulation of inter-site requests, allows attackers to access confidential data.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the manipulation of inter-site requests. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data remotely...