EUVD-2025-28793

Malicious code in bioql PyPI...

EUVD-2024-34967

Malicious code in bioql PyPI...

EUVD-2023-41446

Malicious code in bioql PyPI...

EUVD-2024-34964

Malicious code in bioql PyPI...

EUVD-2025-31182

Malicious code in bioql PyPI...

EUVD-2022-52601

Malicious code in bioql PyPI...

EUVD-2025-12335

Malicious code in bioql PyPI...

EUVD-2024-34968

Malicious code in bioql PyPI...

EUVD-2021-7083

Malicious code in bioql PyPI...

EUVD-2024-40588

Malicious code in bioql PyPI...

EUVD-2024-40589

Malicious code in bioql PyPI...

EUVD-2022-32425

Malicious code in bioql PyPI...

EUVD-2025-24193

Malicious code in bioql PyPI...

The vulnerability of the qcom/lpass.h component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the qcom/lpass.h component in the Linux operating system’s kernel is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unitree多款产品 安全漏洞

Unitree Go2 is a robot dog, Unitree G1 is a humanoid robot, and Unitree H1 is a humanoid robot. A security vulnerability exists in various Unitree products that originates from the acceptance of an arbitrary handshake key containing a substring of unitree. The following products and versions are...

Duplicate Advisory: The Keras `Model.load_model` method **silently** ignores `safe_mode=True` and allows arbitrary code execution when a `.h5`/`.hdf5` file is loaded.

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-36rr-ww3j-vrjv. This link is maintained to preserve external references. Original Description The Keras Model.loadmodel method can be exploited to achieve arbitrary code execution, even with safemode=True. One c...

PYSEC-2025-123

The Keras Model.loadmodel method can be exploited to achieve arbitrary code execution, even with safemode=True. One can create a specially crafted .h5/.hdf5 model archive that, when loaded via Model.loadmodel, will trigger arbitrary code to be executed. This is achieved by crafting a special...

PYSEC-2025-123

The Keras Model.loadmodelmethod can be exploited to achieve arbitrary code execution, even with safemode=True.One can create a specially crafted .h5/.hdf5model archive that, when loaded via Model.loadmodel, will trigger arbitrary code to be executed.This is achieved by crafting a special .h5archi...

CVE-2025-9905 Arbitary Code execution in Keras load_model()

The Keras Model.loadmodel method can be exploited to achieve arbitrary code execution, even with safemode=True. One can create a specially crafted .h5/.hdf5 model archive that, when loaded via Model.loadmodel, will trigger arbitrary code to be executed. This is achieved by crafting a special...

CVE-2022-50327

In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: idle: Check acpifetchacpidev return value The return value of acpifetchacpidev could be NULL, which would cause a NULL pointer dereference to occur in acpidevicehid. rjw: Subject and changelog edits, added empty...