EUVD-2023-56079

Malicious code in bioql PyPI...

EUVD-2021-9502

Malicious code in bioql PyPI...

EUVD-2021-9466

Malicious code in bioql PyPI...

EUVD-2022-42727

Malicious code in bioql PyPI...

EUVD-2025-3672

Malicious code in bioql PyPI...

CVE-2025-59147: Improperly Implemented Security Check for Standard

Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. Versions 7.0.11 and below, as well as 8.0.0, are vulnerable to detection bypass when crafted traffic sends multiple SYN packets with different sequence numbers with...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation via the Certificate gRPC service not validating whether the requested IP addresses are associated with the requesting peer. An attacker can obtain valid mTLS certificates for arbitrary IP addresses by...

CVE-2025-59353

Technical details beyond the initial description are not provided in the connected sources. Monitor for updates from vendor/security advisories for CVE-2025-59353.

PT-2025-38272

Name of the Vulnerable Software and Affected Versions Dragonfly versions prior to 2.1.0 Description A peer can obtain a valid TLS certificate for arbitrary IP addresses, rendering the mTLS authentication ineffective. The Manager’s Certificate gRPC service does not validate if the requested IP...

Malicious code in checking-ips (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 941a9d77f27a5cf03000409003dc26dc454bbdfe54ff4e4bdcd72c5184e45263 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47015 Malicious code in checking-ips (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 941a9d77f27a5cf03000409003dc26dc454bbdfe54ff4e4bdcd72c5184e45263 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

45 Previously Unreported Domains Expose Longstanding Salt Typhoon Cyber Espionage

Threat hunters have discovered a set of previously unreported domains, some going back to May 2020, that are associated with China-linked threat actors Salt Typhoon and UNC4841. "The domains date back several years, with the oldest registration activity occurring in May 2020, further confirming...

MAL-2025-12061 Malicious code in @zalastax/nolb-ips (npm)

The package @zalastax/nolb-ips was found to contain malicious code...

MAL-2025-23347 Malicious code in ips-visual-parse (npm)

The package ips-visual-parse was found to contain malicious code...

Malicious code in ips-visual-parse (npm)

The package ips-visual-parse was found to contain malicious code...

Malicious code in @zalastax/nolb-ips (npm)

The package @zalastax/nolb-ips was found to contain malicious code...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via iPSLvl2page while converting the image to PostScript Level 2 output. An attacker can cause denial of service by providing a specially crafted TIFF file. Note: This is only exploitable if DEFERSTRILELOAD...

CVE-2025-53081

An 'Arbitrary File Creation' in Samsung DMSData Management Server allows attackers to create arbitrary files in unintended locations on the filesystem. Exploitation is restricted to specific, authorized private IP addresses...

PT-2025-31069

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A crash in the conntrack component of the Linux kernel was reported due to the removal of an uninitialized entry. The issue occurs when an expired conntrack entry is deleted from the has...

CVE-2025-49545

ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by a Server-Side Request Forgery SSRF vulnerability that could lead to arbitrary file system read. A high-privilege authenticated attacker can force the application to make arbitrary requests via injection of URLs. Exploitation...