EUVD-2022-3406

Malicious code in bioql PyPI...

EUVD-2023-58582

Malicious code in bioql PyPI...

EUVD-2025-32014

Malicious code in bioql PyPI...

EUVD-2024-52654

Malicious code in bioql PyPI...

EUVD-2025-27976

Malicious code in bioql PyPI...

EUVD-2024-52538

Malicious code in bioql PyPI...

EUVD-2022-4321

Malicious code in bioql PyPI...

EUVD-2022-3731

Malicious code in bioql PyPI...

EUVD-2022-35001

Malicious code in bioql PyPI...

EUVD-2025-12743

Malicious code in bioql PyPI...

EUVD-2021-7267

Malicious code in bioql PyPI...

EUVD-2023-46195

Malicious code in bioql PyPI...

EUVD-2023-0618

Malicious code in bioql PyPI...

EUVD-2021-28831

Malicious code in bioql PyPI...

firefox security update

An update is available for firefox. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Firefox is an open-source web browser, designed for standards...

RLSA-2025:11797 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: thunderbird: Large branch table could lead to truncated instruction CVE-2025-8028 firefox: thunderbird: Memory safety bugs CVE-2025-8035 firefox: thunderbird:...

CVE-2025-59835

LangBot is a global IM bot platform designed for LLMs. In versions 4.1.0 up to but not including 4.3.5, authorized attackers can exploit the /api/v1/files/documents interface to perform arbitrary file uploads. Since this interface does not strictly restrict the storage directory of files on the...

CVE-2025-59835 LangBot has a cross-directory file upload vulnerability, which could lead to system takeover

LangBot is a global IM bot platform designed for LLMs. In versions 4.1.0 up to but not including 4.3.5, authorized attackers can exploit the /api/v1/files/documents interface to perform arbitrary file uploads. Since this interface does not strictly restrict the storage directory of files on the...

CVE-2025-59835 LangBot has a cross-directory file upload vulnerability, which could lead to system takeover

LangBot is a global IM bot platform designed for LLMs. In versions 4.1.0 up to but not including 4.3.5, authorized attackers can exploit the /api/v1/files/documents interface to perform arbitrary file uploads. Since this interface does not strictly restrict the storage directory of files on the...

Confucius Hackers Hit Pakistan With New WooperStealer and Anondoor Malware

The threat actor known as Confucius has been attributed to a new phishing campaign that has targeted Pakistan with malware families like WooperStealer and Anondoor. "Over the past decade, Confucius has repeatedly targeted government agencies, military organizations, defense contractors, and...