Unity Linux 20.1070a Security Update: udisks2 (UTSA-2025-987420)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987420 advisory. A flaw was found in the Udisks daemon, where it allows unprivileged users to create loop devices using the D-BUS system. This is achieved via the loop device handler...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-380977)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-380977 advisory. In the Linux kernel, the following vulnerability has been resolved: cpumap: Zero-initialise xdprxqinfo struct before running XDP program When running an XDP program...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986556)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986556 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: ep0: fix NULL pointer exception There is no validation of the index from dwc3wIndextod...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987401)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987401 advisory. In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in diAlloc Currently there is not check against the agno of th...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414432)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414432 advisory. In drivers/usb/gadget/udc/udc-xilinx.c in the Linux kernel before 5.16.12, the endpoint index is not validated and might be manipulated by the host for out-of-array...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987210)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987210 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: ep0: fix NULL pointer exception There is no validation of the index from dwc3wIndextod...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-387808)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-387808 advisory. In the Linux kernel, the following vulnerability has been resolved: drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error Ensure index in...

DEBIAN-CVE-2025-61774

PyVista provides 3D plotting and mesh analysis through an interface for the Visualization Toolkit VTK. Version 0.46.3 of the PyVista Project is vulnerable to remote code execution via dependency confusion. Two pieces of code use--extra-index-url. But when --extra-index-url is used, pip always...

CVE-2025-61774

PyVista provides 3D plotting and mesh analysis through an interface for the Visualization Toolkit VTK. Version 0.46.3 of the PyVista Project is vulnerable to remote code execution via dependency confusion. Two pieces of code use--extra-index-url. But when --extra-index-url is used, pip always...

UBUNTU-CVE-2025-61774

PyVista provides 3D plotting and mesh analysis through an interface for the Visualization Toolkit VTK. Version 0.46.3 of the PyVista Project is vulnerable to remote code execution via dependency confusion. Two pieces of code use--extra-index-url. But when --extra-index-url is used, pip always...

CVE-2025-61774 PyVista has Dependency Confusion Vulnerability in that leads to RCE

PyVista provides 3D plotting and mesh analysis through an interface for the Visualization Toolkit VTK. Version 0.46.3 of the PyVista Project is vulnerable to remote code execution via dependency confusion. Two pieces of code use--extra-index-url. But when --extra-index-url is used, pip always...

CVE-2025-61774

CVE-2025-61774 affects PyVista 0.46.3 and enables remote code execution through dependency confusion using pip --extra-index-url. The description notes that two code paths use --extra-index-url, and pip may fetch a higher-version package from a non-PyPI index if one package listed is not publishe...

EUVD-2025-32591

PyVista provides 3D plotting and mesh analysis through an interface for the Visualization Toolkit VTK. Version 0.46.3 of the PyVista Project is vulnerable to remote code execution via dependency confusion. Two pieces of code use--extra-index-url. But when --extra-index-url is used, pip always...

CVE-2025-61774

PyVista provides 3D plotting and mesh analysis through an interface for the Visualization Toolkit VTK. Version 0.46.3 of the PyVista Project is vulnerable to remote code execution via dependency confusion. Two pieces of code use--extra-index-url. But when --extra-index-url is used, pip always...

CVE-2025-61774 PyVista has Dependency Confusion Vulnerability in that leads to RCE

PyVista provides 3D plotting and mesh analysis through an interface for the Visualization Toolkit VTK. Version 0.46.3 of the PyVista Project is vulnerable to remote code execution via dependency confusion. Two pieces of code use--extra-index-url. But when --extra-index-url is used, pip always...

CVE-2025-61774 PyVista has Dependency Confusion Vulnerability in that leads to RCE

PyVista provides 3D plotting and mesh analysis through an interface for the Visualization Toolkit VTK. Version 0.46.3 of the PyVista Project is vulnerable to remote code execution via dependency confusion. Two pieces of code use--extra-index-url. But when --extra-index-url is used, pip always...

CVE-2025-11306

A vulnerability was found in qianfox FoxCMS up to 1.2. This affects an unknown part of the file /index.php/Search of the component Search Page. The manipulation of the argument keyword results in cross site scripting. The attack can be executed remotely. The exploit has been made public and could...

praktikum_xss

PoC exploit for a web application vulnerability, specifically ta...

Malicious code in gnosis-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 42112b8b2e7c96d9c3a5a188bebf3539cba140ccfdcc721ea9952259b8893721 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

CVE-2025-61774: Improper Control of Generation of Code

PyVista provides 3D plotting and mesh analysis through an interface for the Visualization Toolkit VTK. Version 0.46.3 of the PyVista Project is vulnerable to remote code execution via dependency confusion. Two pieces of code use--extra-index-url. But when --extra-index-url is used, pip always...