EUVD-2021-27099

Malware in sbrugna...

EUVD-2021-10316

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986788)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986788 advisory. In the Linux kernel, the following vulnerability has been resolved: i40e: Fix NULL pointer dereference in i40edbgdumpdesc When trying to dump VFs VSI RX/TX descripto...

RockyLinux 9 : kernel (RLSA-2025:9302)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:9302 advisory. kernel: ice: Fix deinitializing VF in error path CVE-2025-21883 kernel: sched/fair: Fix potential memory corruption in childcfsrqonlist CVE-2025-21919...

BIT-DISCOURSE-2025-59337 Discourse: Cross-Site Data Exposure via Backup Restore Metacommand Injection in Multisite Deployments

Discourse is an open-source community discussion platform. In versions 3.5.0 and below, malicious meta-commands could be embedded in a backup dump and executed during restore. In multisite setups, this allowed an admin of one site to access data or credentials from other sites. This issue is fixe...

EUVD-2025-25184

Malicious code in bioql PyPI...

EUVD-2022-40714

Malicious code in bioql PyPI...

EUVD-2025-32062

Malicious code in bioql PyPI...

EUVD-2021-30215

Malicious code in bioql PyPI...

EUVD-2025-13533

Malicious code in bioql PyPI...

EUVD-2025-13550

Malicious code in bioql PyPI...

EUVD-2025-24049

Malicious code in bioql PyPI...

EUVD-2025-29040

Malicious code in bioql PyPI...

EUVD-2025-16087

Malicious code in bioql PyPI...

EUVD-2024-51884

Malicious code in bioql PyPI...

EUVD-2025-24813

Malicious code in bioql PyPI...

CVE-2023-53509 qed: allow sleep in qed_mcp_trace_dump()

In the Linux kernel, the following vulnerability has been resolved: qed: allow sleep in qedmcptracedump By default, qedmcpcmdandunion delays 10us at a time in a loop that can run 500K times, so calls to qedmcpnvmrdcmd may block the current thread for over 5s. We observed thread scheduling delays...

PT-2025-40301

Name of the Vulnerable Software and Affected Versions Discourse versions 3.5.0 and below Description Discourse is a community discussion platform. A flaw exists where malicious meta-commands could be placed within a backup dump and then executed during the restore process. In environments with...

Discourse 命令注入漏洞

Discourse is an open source community discussion platform from Discourse Open Source. The platform includes features such as communities, email and chat rooms. A command injection vulnerability exists in Discourse 3.5.0 and prior versions, which stems from a malicious meta-command that can be...

kernel: net/sched: sch_qfq: Fix race condition on qfq_aggregate

In the Linux kernel, the following vulnerability has been resolved: net/sched: schqfq: Fix race condition on qfqaggregate A race condition can occur when 'agg' is modified in qfqchangeagg called during qfqenqueue while other threads access it concurrently. For example, qfqdumpclass may trigger a...