Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986561)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986561 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dispnv04: fix null pointer dereference in nv17tvgethdmodes In nv17tvgethdmodes, the...

EUVD-2025-5493

Malicious code in bioql PyPI...

EUVD-2024-43732

Malicious code in bioql PyPI...

EUVD-2023-54648

Malicious code in bioql PyPI...

EUVD-2023-58771

Malicious code in bioql PyPI...

EUVD-2023-36193

Malicious code in bioql PyPI...

EUVD-2023-57421

Malicious code in bioql PyPI...

EUVD-2024-19757

Malicious code in bioql PyPI...

Apple Security Update: tvOS 26.0.1

Apple recommends to install security update tvOS 26.0.1 on devices Apple TV HD and Apple TV 4K all models...

CVE-2025-57437: Exposure of Sensitive Information to an Unauthorized Actor

The Blackmagic Web Presenter HD firmware version 3.3 exposes sensitive information via an unauthenticated Telnet service on port 9977. When connected, the service reveals extensive device configuration data including: - Model, version, and unique identifiers - Network settings including IP, MAC,...

CVE-2025-47421

CVE-2025-47421 affects CRESTRON TOUCHSCREENS x70 (versions 3.001.0031.001 through 3.001.0034.001). The issue is an improper neutralization of argument delimiters in a command, enabling argument injection via a specially crafted SCP command over SSH that can grant a privileged operating system ses...

CVE-2025-50777: Improper Access Control

The firmware of the AZIOT 2MP Full HD Smart Wi-Fi CCTV Home Security Camera version V1.00.02 contains an Incorrect Access Control vulnerability that allows local attackers to gain root shell access. Once accessed, the device exposes critical data including Wi-Fi credentials and ONVIF service...

CVE-2025-38056

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda: Fix UAF when reloading module hdagenericmachineselect appends -idisp to the tplg filename by allocating a new string with devmkasprintf, then stores the string right back into the global variable...

Malicious code in @hd-base/atoms (npm)

The package communicates with a domain associated with malicious activity...

CVE-2024-22161

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Harmonic Design HD Quiz allows Stored XSS.This issue affects HD Quiz: from n/a through 1.8.11...

CVE-2024-48214

KERUI HD 3MP 1080P Tuya Camera 1.0.4 has a command injection vulnerability in the module that connects to the local network via a QR code. This vulnerability allows an attacker to create a custom, unauthenticated QR code and abuse one of the parameters, either SSID or PASSWORD, in the JSON data...

CVE-2024-49689

Missing Authorization vulnerability in Harmonic Design HD Quiz – Save Results Light hd-quiz-save-results-light allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HD Quiz – Save Results Light: from n/a through = 0.5...

CVE-2024-46960

The ASD com.rocks.video.downloader aka HD Video Downloader All Format application through 7.0.129 for Android allows an attacker to execute arbitrary JavaScript code via the com.rocks.video.downloader.MainBrowserActivity component...

CVE-2023-5081

An information disclosure vulnerability was reported in the Lenovo Tab M8 HD that could allow a local application to gather a non-resettable device identifier...

CVE-2021-24571

The HD Quiz WordPress plugin before 1.8.4 does not escape some of its Answers before outputting them in attribute when generating the Quiz, which could lead to Stored Cross-Site Scripting issues...