EUVD-2025-3727

Malicious code in bioql PyPI...

EUVD-2023-24834

Malicious code in bioql PyPI...

EUVD-2021-29646

Malicious code in bioql PyPI...

EUVD-2024-47635

Malicious code in bioql PyPI...

EUVD-2025-27303

Malicious code in bioql PyPI...

EUVD-2022-39837

Malicious code in bioql PyPI...

EUVD-2021-30549

Malicious code in bioql PyPI...

EUVD-2021-30550

Malicious code in bioql PyPI...

EUVD-2024-19415

Malicious code in bioql PyPI...

EUVD-2025-24294

Malicious code in bioql PyPI...

EUVD-2025-24369

Malicious code in bioql PyPI...

EUVD-2025-24292

Malicious code in bioql PyPI...

RLSA-2025:8341 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details CVE-2025-5267 firefox: thunderbird: Potential local code execution ...

CVE-2025-57714 NetBak Replicator

An unquoted search path or element vulnerability has been reported to affect NetBak Replicator. If a local attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: NetBak...

PT-2026-2690

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A heap-based buffer overflow exists in Windows NTFS that could allow an authorized attacker to execute code locally. Remote attackers may be able to execute arbitrary code and affect the...

PT-2026-2727

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A heap-based buffer overflow exists in Windows NTFS. This allows a locally authorized attacker to execute code. The issue may allow remote attackers to execute arbitrary code and affect...

Poetry Argument Injection vulnerability can lead to local Code Execution

...

Advisory ROSA-SA-2025-3027

software: jasper 2.0.33 WASP: ROSA-CHROME unaffected versions = jasper-2.0.33-2 affected versions jasper-2.0.33-2 CVE-ID: CVE-2025-8835 BDU-ID: None CVE-Crit: LOW CVE-DESC.: A vulnerability in JasPer before version 4.2.5 allows a crash due to null pointer dereferencing in the jasimagechclrspc...

OESA-2025-2322 python-pyinstaller security update

PyInstaller bundles a Python application and all its dependencies into a single package. The user can run the packaged app without installing a Python interpreter or any modules. Security Fixes: Due to a special entry being appended to sys.path during the bootstrap process of a PyInstaller-frozen...

ogre 安全漏洞

ogre is a scene-oriented 3D engine open-sourced by OGRECave. A security vulnerability exists in ogre 14.4.1 and earlier versions, which stems from a memory management mismatch in the STBIImageCodec::encode function that could lead to a local execution attack...