EUVD-2024-20826

Malicious code in bioql PyPI...

EUVD-2023-49888

Malicious code in bioql PyPI...

EUVD-2022-34475

Malicious code in bioql PyPI...

EUVD-2023-50429

Malicious code in bioql PyPI...

EUVD-2023-23927

Malicious code in bioql PyPI...

EUVD-2024-53237

Malicious code in bioql PyPI...

EUVD-2023-49890

Malicious code in bioql PyPI...

EUVD-2025-11921

Malicious code in bioql PyPI...

EUVD-2025-30840

Malicious code in bioql PyPI...

CVE-2025-59413 CubeCart Unauthorized Newsletter Unsubscription via force_unsubscribe Parameter

CubeCart is an ecommerce software solution. Prior to version 6.5.11, a logic flaw exists in the newsletter subscription endpoint that allows an attacker to unsubscribe any user without their consent. By changing the value of the forceunsubscribe parameter in the POST request to 1, an attacker can...

PT-2025-38745

Name of the Vulnerable Software and Affected Versions CubeCart versions prior to 6.5.11 Description A flaw exists in the newsletter subscription functionality that permits unauthorized user unsubscription. An attacker can manipulate the force unsubscribe parameter in a POST request to the...

CVE-2025-39852 net/tcp: Fix socket memory leak in TCP-AO failure handling for IPv6

In the Linux kernel, the following vulnerability has been resolved: net/tcp: Fix socket memory leak in TCP-AO failure handling for IPv6 When tcpaocopyallmatching fails in tcpv6synrecvsock it just exits the function. This ends up causing a memory-leak: unreferenced object 0xffff0000281a8200 size...

MevzuatTR 安全漏洞

MevzuatTR is an online platform for retrieval and notification of judicial decisions in Turkey by MevzuatTR Turkey. A security vulnerability exists in MevzuatTR versions prior to 12.02.2025 that stems from improper input neutralization and improper UI layer or frame restriction, which could lead ...

DEBIAN-CVE-2025-38735

In the Linux kernel, the following vulnerability has been resolved: gve: prevent ethtool ops after shutdown A crash can occur if an ethtool operation is invoked after shutdown is called. shutdown is invoked during system shutdown to stop DMA operations without performing expensive deallocations. ...

CVE-2025-38735 gve: prevent ethtool ops after shutdown

In the Linux kernel, the following vulnerability has been resolved: gve: prevent ethtool ops after shutdown A crash can occur if an ethtool operation is invoked after shutdown is called. shutdown is invoked during system shutdown to stop DMA operations without performing expensive deallocations. ...

CVE-2025-26444

In onHandleForceStop of VoiceInteractionManagerService.java, there is a bug that could cause the system to incorrectly revert to the default assistant application when a user-selected assistant is forcibly stopped due to a logic error in the code. This could lead to local escalation of privilege...

CVE-2025-26444

In onHandleForceStop of VoiceInteractionManagerService.java, there is a bug that could cause the system to incorrectly revert to the default assistant application when a user-selected assistant is forcibly stopped due to a logic error in the code. This could lead to local escalation of privilege...

Akinsoft MyRezzta 安全漏洞

Akinsoft MyRezzta is an online food ordering system from Akinsoft Turkey. Akinsoft MyRezzta versions prior to s2.02.02 to v2.05.01 contain a security vulnerability that originates from an authorization bypass due to a user control key, which could lead to forced browsing...

LimonDesk 访问控制错误漏洞

LimonDesk is a real-time chat, work order ticketing, and other features from LimonDesk, a Turkish company. An access control error vulnerability exists in LimonDesk s1.02.14 through versions prior to v1.ylabel17, which stems from a source validation error that could lead to forced browsing...

Linux Distros Unpatched Vulnerability : CVE-2019-14831

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Moodle 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions, where forum subscribe link contained an open...