EUVD-2018-18511

Malware in sbrugna...

EUVD-2017-1825

Malware in sbrugna...

EUVD-2011-3529

Malware in sbrugna...

EUVD-2023-25699

Malicious code in bioql PyPI...

EUVD-2024-43784

Malicious code in bioql PyPI...

EUVD-2025-30251

Malicious code in bioql PyPI...

EUVD-2025-23274

Malicious code in bioql PyPI...

EUVD-2022-15674

Malicious code in bioql PyPI...

CLSA-2025-1759505734 podman: Fix of CVE-2025-9566

CVE-2025-9566: fix kube play vulnerability that allows following volume symlinks onto the host filesystem. Prevent symlink-based host escapes in ConfigMap and Secret volumes...

Cross-Site Scripting (Reflected XSS)

com.liferay, com.liferay.layout.taglib is vulnerable to reflected cross-site scripting XSS. The vulnerability is due to improper validation of the embedded message field in the form container, which allows an attacker to inject and execute arbitrary JavaScript in a victim’s browser...

TencentOS Server 4: moby (TSSA-2025:0667)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0667 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Security Bulletin: The Container Version of the B2B API of the IBM Stelring B2B Integrator and IBM Sterling File Gateway are Vulnerable to Information Disclosure (CVE-2025-2988)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the information disclosure security vulnerability Vulnerability Details CVEID:CVE-2025-2988 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could disclose sensitive server information to an unauthorized use...

Linux Distros Unpatched Vulnerability : CVE-2016-9191

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The cgroup offline implementation in the Linux kernel through 4.8.11 mishandles certain drain operations, which allows local users to cause a denial of service...

CVE-2025-46809

A Plaintext Storage of a Password vulnerability in SUSE exposes the credentials for the HTTP proxy in the log files. This issue affects Container suse/manager/4.3/proxy-httpd:4.3.16.9.67.1: from ? before 4.3.33-150400.3.55.2; Container suse/manager/5.0/x8664/proxy-httpd:5.0.5.7.23.1: from ? befor...

PT-2025-28200 · Unknown · Educoder Challenges

Name of the Vulnerable Software and Affected Versions: educoder challenges version 1.0 Description: The issue is related to insufficient security mechanisms for created containers, allowing attackers to execute arbitrary code by injecting crafted content into a container. Recommendations: For...

The vulnerability of the IBM Security Verify Directory integration tool’s container allows a perpetrator to elevate their privileges and execute arbitrary commands.

The vulnerability of the IBM Security Verify Directory integration tool’s container is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges and execute arbitrary commands...

CVE-2025-49842

conda-forge-webservices is the web app deployed to run conda-forge admin commands and linting. Prior to version 2025.3.24, the condaforgewebservice Docker container executes commands without specifying a user. By default, Docker containers run as the root user, which increases the risk of privile...

Security Bulletin: IBM Cloud Pak for Data is vulnerable to UNIX Symbolic Link (Symlink) Following due to runc package ( CVE-2024-45310 )

Summary Potential vulnerabilities in runc package CVE-2024-45310 has been identified that may affect IBM Cloud Pak for Data. Vulnerability Details CVEID:CVE-2024-45310 DESCRIPTION: runc is a CLI tool for spawning and running containers according to the OCI specification. runc 1.1.13 and earlier, ...

CVE-2025-23393

CVE-2025-23393 is a reflected XSS in spacewalk-java. Affected: SUSE Manager 5.0 (Container suse/manager/5.0/x86_64/server:5.0.4.7.19.1) and SUSE Manager Server Module 4.3 (before 4.3.85-150400.3.105.3). Root cause: improper sanitization of user input in the systems list page. Impact: potential ex...

CVE-2022-43917

IBM WebSphere Application Server 8.5 and 9.0 traditional container uses weaker than expected cryptographic keys that could allow an attacker to decrypt sensitive information. This affects only the containerized version of WebSphere Application Server traditional. IBM X-Force ID: 241045...