EUVD-2025-7195

Malicious code in bioql PyPI...

EUVD-2025-6740

Malicious code in bioql PyPI...

EUVD-2024-31676

Malicious code in bioql PyPI...

EUVD-2024-50176

Malicious code in bioql PyPI...

EUVD-2024-17538

Malicious code in bioql PyPI...

EUVD-2024-21372

Malicious code in bioql PyPI...

PT-2025-46746

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The lan78xx read raw eeprom function did not correctly handle EEPROM read timeout errors -ETIMEDOUT. The function would discard the original timeout error and return only the status of a...

H2O Flow Unauthenticated Access

H2O Flow is an open-source user interface for H2O, an open-source, distributed and scalable machine learning and predictive analytics platform. By default, H2O Flow does not require authentication to access the application. This allows an attacker to access sensitive data. This detection is...

WordPress plugin Download Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

MAL-2025-47495 Malicious code in react-thunk-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 929d9268bc92055751c7f10bae27b10942586f07c6fb81b6740905a7b067604d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-43231

A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.8. An app may be able to access user-sensitive data...

CVE-2025-43293

CVE-2025-43293 affects macOS Sequoia and macOS Sonoma, with the issue resolved by input validation fixes in macOS Sequoia 15.7 and macOS Sonoma 14.8. The description indicates that an app may be able to access sensitive user data due to inadequate input validation. The connected documents confirm...

Huawei EulerOS: Security Advisory for protobuf (EulerOS-SA-2025-2081)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-40804

A vulnerability has been identified in SIMATIC Virtualization as a Service SIVaaS All versions. The affected application exposes a network share without any authentication. This could allow an attacker to access or alter sensitive data without proper authorization...

CVE-2025-40804

A vulnerability has been identified in SIMATIC Virtualization as a Service SIVaaS All versions. The affected application exposes a network share without any authentication. This could allow an attacker to access or alter sensitive data without proper authorization...

OESA-2025-2104 postgresql-13 security update

PostgreSQL is an advanced Object-Relational database management system DBMS. The base postgresql package contains the client programs that you'll need to access a PostgreSQL DBMS server, as well as HTML documentation for the whole system. These client programs can be located on the same machine a...

postgresql: PostgreSQL code execution in restore operation

A flaw was found in PostgreSQL. This vulnerability allows a malicious superuser on a PostgreSQL server to inject arbitrary code into dump files created by pgdump, pgdumpall, and pgrestore, causing arbitrary code execution on the client machine when these dump files are restored by psql due to...

Security update for postgresql14

This update for postgresql14 fixes the following issues: Upgrade to 14.19: CVE-2025-8713: optimizer statistics can expose sampled data within a view, partition, or child table bsc1248120. CVE-2025-8714: untrusted data inclusion in pgdump lets superuser of origin server execute arbitrary code in...

Sensitive Information Exposure

@workos-inc/authkit-react-router is vulnerable to Sensitive Information Exposure. The vulnerability is due to authentication artifacts such as sealedSession and accessToken being returned from the authkitLoader and rendered into browser HTML, which allows an attacker to obtain sensitive session...

PT-2025-34873

Name of the Vulnerable Software and Affected Versions: OPNsense version 25.1 Description: OPNsense version 25.1 contains an authenticated command injection issue in the Bridge Interface Edit endpoint interfaces bridge edit.php. The span POST parameter is concatenated into a system-level command...