EUVD-2025-199481

Malicious code in @oku-ui/focus-guards npm...

MAL-2025-191258 Malicious code in @oku-ui/focus-guards (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be54bbe591353c4c933233a1a09528758655ff1b2ace9a091d907a3a1905c405 The package @oku-ui/focus-guards was found to contain malicious code. Source: google-open-source-security...

EUVD-2006-3413

Malware in sbrugna...

EUVD-2025-29474

Malicious code in bioql PyPI...

SUSE CVE-2022-50448

In the Linux kernel, the following vulnerability has been resolved: mm/uffd: fix warning without PTEMARKERUFFDWP compiled in When PTEMARKERUFFDWP not configured, it's still possible to reach pte marker code and trigger an warning. Add a few CONFIGPTEMARKERUFFDWP ifdefs to make sure the code won't...

Malicious code in @self-sell/guards (npm)

The package @self-sell/guards was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 594bf67cf504a8b4b9f076c7913f69f5a9b3f0677a7528de143d2b247cf3bff7 Any computer that has this package installed or running should be considered fully...

MAL-2025-47045 Malicious code in @self-sell/guards (npm)

The package @self-sell/guards was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 594bf67cf504a8b4b9f076c7913f69f5a9b3f0677a7528de143d2b247cf3bff7 Any computer that has this package installed or running should be considered fully...

Malicious code in @liquid-web/guards (npm)

The package @liquid-web/guards was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff39fb3d64f126121b204db1daa7ccf8738a1cc5d70406735a1a9fab3e983691 Any computer that has this package installed or running should be considered fully...

MAL-2025-47035 Malicious code in @liquid-web/guards (npm)

The package @liquid-web/guards was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff39fb3d64f126121b204db1daa7ccf8738a1cc5d70406735a1a9fab3e983691 Any computer that has this package installed or running should be considered fully...

[SECURITY] [DSA 5990-1] libxml2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5990-1 [email protected] https://www.debian.org/security/ Aron Xu August 29, 2025 https://www.debian.org/security/faq -...

Remote Code Execution (RCE)

Overview picklescan is a Security scanner detecting Python Pickle files performing suspicious actions Affected versions of this package are vulnerable to Remote Code Execution RCE due to insufficient detection in the evaluateguardsexpression function. An attacker can execute arbitrary code by...

GHSA-F4X7-RFWP-V3XW Picklescan missing detection when calling pytorch function torch.fx.experimental.symbolic_shapes.ShapeEnv.evaluate_guards_expression

Summary Using torch.fx.experimental.symbolicshapes.ShapeEnv.evaluateguardsexpression function, which is a pytorch library function to execute remote pickle file. Details The attack payload executes in the following steps: First, the attacker craft the payload by calling to...

Picklescan missing detection when calling pytorch function torch.fx.experimental.symbolic_shapes.ShapeEnv.evaluate_guards_expression

Summary Using torch.fx.experimental.symbolicshapes.ShapeEnv.evaluateguardsexpression function, which is a pytorch library function to execute remote pickle file. Details The attack payload executes in the following steps: First, the attacker craft the payload by calling to...

Remote Code Execution (RCE)

Overview picklescan is a Security scanner detecting Python Pickle files performing suspicious actions Affected versions of this package are vulnerable to Remote Code Execution RCE due to using the torch.dynamo.guards.GuardBuilder.get function. An attacker can execute arbitrary code by crafting a...

PT-2026-55671

Name of the Vulnerable Software and Affected Versions picklescan versions prior to 0.0.28 Description The software fails to detect malicious calls to the evaluate guards expression function within the torch.fx.experimental.symbolic shapes.ShapeEnv module in pickle files. This allows attackers to...

CVE-2025-7791

A vulnerability was found in PHPGurukul Online Security Guards Hiring System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/search.php. The manipulation of the argument searchdata leads to cross site scripting. The attack can be initiated...

PT-2025-30056 · Phpgurukul · Phpgurukul Online Security Guards Hiring System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Security Guards Hiring System version 1.0 Description: A vulnerability exists in PHPGurukul Online Security Guards Hiring System that allows for cross site scripting. The issue is located in the /admin/search.php file, where...

CVE-2025-3138 PHPGurukul Online Security Guards Hiring System edit-guard-detail.php sql injection

A vulnerability has been found in PHPGurukul Online Security Guards Hiring System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/edit-guard-detail.php. The manipulation of the argument editid leads to sql injection. The attack can be...

CVE-2025-3137 PHPGurukul Online Security Guards Hiring System changeimage.php sql injection

A vulnerability, which was classified as critical, was found in PHPGurukul Online Security Guards Hiring System 1.0. Affected is an unknown function of the file /admin/changeimage.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. Th...

CVE-2025-3137

The CVE-2025-3137 issue affects PHPGurukul Online Security Guards Hiring System 1.0. The vulnerable component is the /admin/changeimage.php file, where manipulating the editid parameter enables SQL injection. Attacks can be launched remotely and public disclosures exist. Documents consistently id...