EUVD-2021-30491

Malicious code in bioql PyPI...

EUVD-2025-12349

Malicious code in bioql PyPI...

EUVD-2025-12350

Malicious code in bioql PyPI...

EUVD-2021-7376

Malicious code in bioql PyPI...

EUVD-2023-32250

Malicious code in bioql PyPI...

EUVD-2022-55255

Malicious code in bioql PyPI...

EUVD-2021-7365

Malicious code in bioql PyPI...

EUVD-2025-18505

Malicious code in bioql PyPI...

EUVD-2023-2224

Malicious code in bioql PyPI...

EUVD-2024-30802

Malicious code in bioql PyPI...

EUVD-2025-23791

Malicious code in bioql PyPI...

EUVD-2025-20486

Malicious code in bioql PyPI...

EUVD-2021-7409

Malicious code in bioql PyPI...

EUVD-2024-25156

Malicious code in bioql PyPI...

kernel security update

An update is available for kernel. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

CVE-2025-39928

In the Linux kernel, the following vulnerability has been resolved: i2c: rtl9300: ensure data length is within supported range Add an explicit check for the xfer length to 'rtl9300i2cconfigxfer' to ensure the data length isn't within the supported range. In particular a data length of 0 is not...

CVE-2025-39917

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds dynptr write in bpfcryptocrypt Stanislav reported that in bpfcryptocrypt the destination dynptr's size is not validated to be at least as large as the source dynptr's size before calling into the crypto...

The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to string objects that result in a negative length, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact by leveraging a script's use of .= with a long string.

...

lrzsz before version 0.12.21~rc can leak information to the receiving side due to an incorrect length check in the function zsdata that causes a size_t to wrap around.

...

Tenda AC18 缓冲区错误漏洞

Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users. Tenda AC18 has a stack buffer overflow vulnerability, which stems from the cloneType parameter in the fromAdvSetMacMtuWan function failing to correctly...