EUVD-2025-24115

Malicious code in bioql PyPI...

EUVD-2025-24373

Malicious code in bioql PyPI...

EUVD-2023-47984

Malicious code in bioql PyPI...

EUVD-2025-24297

Malicious code in bioql PyPI...

EUVD-2025-24292

Malicious code in bioql PyPI...

EUVD-2025-24293

Malicious code in bioql PyPI...

EUVD-2025-16339

Malicious code in bioql PyPI...

EUVD-2024-32460

Malicious code in bioql PyPI...

EUVD-2025-20751

Malicious code in bioql PyPI...

EUVD-2025-24299

Malicious code in bioql PyPI...

EUVD-2025-14408

Malicious code in bioql PyPI...

EUVD-2025-27356

Malicious code in bioql PyPI...

EUVD-2025-27339

Malicious code in bioql PyPI...

RLSA-2025:8341 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details CVE-2025-5267 firefox: thunderbird: Potential local code execution ...

CVE-2025-57714 NetBak Replicator

An unquoted search path or element vulnerability has been reported to affect NetBak Replicator. If a local attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: NetBak...

PT-2026-2690

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A heap-based buffer overflow exists in Windows NTFS that could allow an authorized attacker to execute code locally. Remote attackers may be able to execute arbitrary code and affect the...

PT-2026-2727

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A heap-based buffer overflow exists in Windows NTFS. This allows a locally authorized attacker to execute code. The issue may allow remote attackers to execute arbitrary code and affect...

Poetry Argument Injection vulnerability can lead to local Code Execution

...

Advisory ROSA-SA-2025-3027

software: jasper 2.0.33 WASP: ROSA-CHROME unaffected versions = jasper-2.0.33-2 affected versions jasper-2.0.33-2 CVE-ID: CVE-2025-8835 BDU-ID: None CVE-Crit: LOW CVE-DESC.: A vulnerability in JasPer before version 4.2.5 allows a crash due to null pointer dereferencing in the jasimagechclrspc...

OESA-2025-2322 python-pyinstaller security update

PyInstaller bundles a Python application and all its dependencies into a single package. The user can run the packaged app without installing a Python interpreter or any modules. Security Fixes: Due to a special entry being appended to sys.path during the bootstrap process of a PyInstaller-frozen...