EUVD-2025-27515

Malicious code in bioql PyPI...

EUVD-2025-7806

Malicious code in bioql PyPI...

EUVD-2024-3033

Malicious code in bioql PyPI...

EUVD-2025-24596

Malicious code in bioql PyPI...

EUVD-2024-54086

Malicious code in bioql PyPI...

EUVD-2022-45044

Malicious code in bioql PyPI...

EUVD-2024-42904

Malicious code in bioql PyPI...

EUVD-2025-11143

Malicious code in bioql PyPI...

EUVD-2025-4179

Malicious code in bioql PyPI...

EUVD-2022-30001

Malicious code in bioql PyPI...

EUVD-2024-51297

Malicious code in bioql PyPI...

EUVD-2025-4587

Malicious code in bioql PyPI...

EUVD-2022-2434

Malicious code in bioql PyPI...

EUVD-2022-4025

Malicious code in bioql PyPI...

Scam Facebook groups send malicious Android malware to seniors

An infostealer and banking Trojan rolled into one is making the rounds in Facebook groups aimed at "active seniors". Attackers used social engineering methods to lure targets into joining fake Facebook groups that appeared to promote travel and community activities—such as trips, dance classes, a...

CVE-2025-39926

In the Linux kernel, the following vulnerability has been resolved: genetlink: fix genlbind invoking bind after -EPERM Per family bind/unbind callbacks were introduced to allow families to track multicast group consumer presence, e.g. to start or stop producing events depending on listeners...

arpwatch 2.1a15, as used by Red Hat, Debian, Fedora, and possibly others, does not properly drop supplementary groups, which might allow attackers to gain root privileges by leveraging other vulnerabilities in the daemon.

...

CVE-2023-53522

In the Linux kernel, the following vulnerability has been resolved: cgroup,freezer: hold cpuhotpluglock before freezermutex syzbot is reporting circular locking dependency between cpuhotpluglock and freezermutex, for commit f5d39b020809 "freezer,sched: Rewrite core freezer logic" replaced atomici...

CVE-2025-34220

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 VA/SaaS deployments contains a /api-gateway/identity/search-groups endpoint that does not require authentication. Requests to...

NewStart CGSL MAIN 6.06 : docker-ce Vulnerability (NS-SA-2025-0232)

The remote NewStart CGSL host, running version MAIN 6.06, has docker-ce packages installed that are affected by a vulnerability: - Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby Docker Engine where supplementary groups are not set up...