Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987269)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987269 advisory. In the Linux kernel, the following vulnerability has been resolved: vtioctl: fix arrayindexnospec in vtsetactivate arrayindexnospec ensures that an out-of-bounds val...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987401)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987401 advisory. In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in diAlloc Currently there is not check against the agno of th...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-387808)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-387808 advisory. In the Linux kernel, the following vulnerability has been resolved: drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error Ensure index in...

Unity Linux 20.1070a Security Update: udisks2 (UTSA-2025-987420)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987420 advisory. A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loop device handler...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986363)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986363 advisory. In the Linux kernel, the following vulnerability has been resolved: vtioctl: fix arrayindexnospec in vtsetactivate arrayindexnospec ensures that an out-of-bounds val...

DEBIAN-CVE-2025-61774

PyVista provides 3D plotting and mesh analysis through an interface for the Visualization Toolkit VTK. Version 0.46.3 of the PyVista Project is vulnerable to remote code execution via dependency confusion. Two pieces of code use--extra-index-url. But when --extra-index-url is used, pip always...

CVE-2025-61774

PyVista provides 3D plotting and mesh analysis through an interface for the Visualization Toolkit VTK. Version 0.46.3 of the PyVista Project is vulnerable to remote code execution via dependency confusion. Two pieces of code use--extra-index-url. But when --extra-index-url is used, pip always...

UBUNTU-CVE-2025-61774

PyVista provides 3D plotting and mesh analysis through an interface for the Visualization Toolkit VTK. Version 0.46.3 of the PyVista Project is vulnerable to remote code execution via dependency confusion. Two pieces of code use--extra-index-url. But when --extra-index-url is used, pip always...

CVE-2025-61774 PyVista has Dependency Confusion Vulnerability in that leads to RCE

PyVista provides 3D plotting and mesh analysis through an interface for the Visualization Toolkit VTK. Version 0.46.3 of the PyVista Project is vulnerable to remote code execution via dependency confusion. Two pieces of code use--extra-index-url. But when --extra-index-url is used, pip always...

CVE-2025-61774

CVE-2025-61774 affects PyVista 0.46.3 and enables remote code execution through dependency confusion using pip --extra-index-url. The description notes that two code paths use --extra-index-url, and pip may fetch a higher-version package from a non-PyPI index if one package listed is not publishe...

CVE-2025-61774 PyVista has Dependency Confusion Vulnerability in that leads to RCE

PyVista provides 3D plotting and mesh analysis through an interface for the Visualization Toolkit VTK. Version 0.46.3 of the PyVista Project is vulnerable to remote code execution via dependency confusion. Two pieces of code use--extra-index-url. But when --extra-index-url is used, pip always...

CVE-2025-61774

PyVista provides 3D plotting and mesh analysis through an interface for the Visualization Toolkit VTK. Version 0.46.3 of the PyVista Project is vulnerable to remote code execution via dependency confusion. Two pieces of code use--extra-index-url. But when --extra-index-url is used, pip always...

EUVD-2025-32591

PyVista provides 3D plotting and mesh analysis through an interface for the Visualization Toolkit VTK. Version 0.46.3 of the PyVista Project is vulnerable to remote code execution via dependency confusion. Two pieces of code use--extra-index-url. But when --extra-index-url is used, pip always...

CVE-2025-61774 PyVista has Dependency Confusion Vulnerability in that leads to RCE

PyVista provides 3D plotting and mesh analysis through an interface for the Visualization Toolkit VTK. Version 0.46.3 of the PyVista Project is vulnerable to remote code execution via dependency confusion. Two pieces of code use--extra-index-url. But when --extra-index-url is used, pip always...

CVE-2025-11306

A vulnerability was found in qianfox FoxCMS up to 1.2. This affects an unknown part of the file /index.php/Search of the component Search Page. The manipulation of the argument keyword results in cross site scripting. The attack can be executed remotely. The exploit has been made public and could...

praktikum_xss

PoC exploit for a web application vulnerability, specifically ta...

Malicious code in gnosis-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 42112b8b2e7c96d9c3a5a188bebf3539cba140ccfdcc721ea9952259b8893721 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

PT-2025-40952

Name of the Vulnerable Software and Affected Versions PyVista version 0.46.3 Description PyVista, a software for 3D plotting and mesh analysis using the Visualization Toolkit VTK, is susceptible to remote code execution through a dependency confusion issue. The software’s use of the...

Mozilla Multiple Products Remote Code Execution Vulnerability

Mozilla Firefox, SeaMonkey, and Thunderbird contain an unspecified vulnerability when JavaScript is enabled. This allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of...

CVE-2025-61774: Improper Control of Generation of Code

PyVista provides 3D plotting and mesh analysis through an interface for the Visualization Toolkit VTK. Version 0.46.3 of the PyVista Project is vulnerable to remote code execution via dependency confusion. Two pieces of code use--extra-index-url. But when --extra-index-url is used, pip always...