EUVD-2025-15003

Malicious code in bioql PyPI...

EUVD-2025-22387

Malicious code in bioql PyPI...

EUVD-2023-59404

Malicious code in bioql PyPI...

EUVD-2025-13221

Malicious code in bioql PyPI...

EUVD-2022-49119

Malicious code in bioql PyPI...

EUVD-2025-7167

Malicious code in bioql PyPI...

EUVD-2022-4499

Malicious code in bioql PyPI...

EUVD-2025-8740

Malicious code in bioql PyPI...

EUVD-2023-54341

Malicious code in bioql PyPI...

EUVD-2025-14480

Malicious code in bioql PyPI...

EUVD-2022-31413

Malicious code in bioql PyPI...

EUVD-2022-6017

Malicious code in bioql PyPI...

EUVD-2023-50881

Malicious code in bioql PyPI...

CVE-2023-50300

IBM Transformation Extender Advanced 10.0.1 could allow a local user to perform unauthorized actions due to improper access controls...

[SECURITY] Fedora 42 Update: freeipa-4.12.5-2.fc42

IPA is an integrated solution to provide centrally managed Identity users, hosts, services, Authentication SSO, 2FA, and Authorization host access control, SELinux user roles, services. The solution provides features for further integration with Linux based clients SUDO, automount and integration...

PT-2025-40613

Name of the Vulnerable Software and Affected Versions ManageEngine Analytics Plus versions 6171 and prior Description The software is susceptible to authenticated SQL Injection through the key update API. The API endpoint is vulnerable due to improper input validation, potentially allowing an...

redis,valkey -- Lua Use-After-Free may lead to remote code execution

redis reports: An authenticated user may use a specially crafted Lua script to manipulate the garbage collector, trigger a use-after-free and potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting. An additional workaround to mitigate the problem...

netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions

A flaw in Netty’s HTTP/1.1 chunked encoding parser allows newline LF characters in chunk extensions to be incorrectly treated as the end of the chunk-size line instead of requiring the proper CRLF sequence. This discrepancy can be exploited in rare cases where a reverse proxy interprets the same...

netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions

A flaw in Netty’s HTTP/1.1 chunked encoding parser allows newline LF characters in chunk extensions to be incorrectly treated as the end of the chunk-size line instead of requiring the proper CRLF sequence. This discrepancy can be exploited in rare cases where a reverse proxy interprets the same...

A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for symbolic links. This could allow an attacker to gain access to privileged files and directories via a path traversal attack.

...