Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986281)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986281 advisory. In the Linux kernel, the following vulnerability has been resolved: powerpc/64s: Fix crashes when toggling entry flush barrier The entry flush mitigation can be...

EUVD-2024-26223

Malicious code in bioql PyPI...

EUVD-2024-51913

Malicious code in bioql PyPI...

EUVD-2024-18478

Malicious code in bioql PyPI...

EUVD-2023-24765

Malicious code in bioql PyPI...

EUVD-2023-36519

Malicious code in bioql PyPI...

EUVD-2022-32713

Malicious code in bioql PyPI...

EUVD-2023-32852

Malicious code in bioql PyPI...

EUVD-2023-48679

Malicious code in bioql PyPI...

EUVD-2022-15447

Malicious code in bioql PyPI...

EUVD-2024-18464

Malicious code in bioql PyPI...

EUVD-2023-46440

Malicious code in bioql PyPI...

EUVD-2022-32717

Malicious code in bioql PyPI...

EUVD-2023-56164

Malicious code in bioql PyPI...

SEV-SNP Physical Memory Aliasing

Summary Researchers have reported a method for privileged attackers with physical access to a motherboard to potentially compromise confidentiality and integrity of AMD Secure Encrypted Virtualization – Secure Nesting Paging SEV-SNP guests. AMD does not plan to release any mitigations in response...

Exploit for Improper Input Validation in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Log4Shell CVE-2021-44228 PoC Objective Reproduce, explo...

winlow

Windows Internals & Exploitation A concise, practical referen...

GHSA-R3JV-XFGX-GJ24 cors-anywhere vulnerable to server-side request forgery

Rob -- W / cors-anywhere instances configured as an open proxy allow unauthenticated external users to induce the server to make HTTP requests to arbitrary targets SSRF. Because the proxy forwards requests and headers, an attacker can reach internal-only endpoints and link-local metadata services...

Server-side Request Forgery (SSRF)

Overview cors-anywhere is a CORS Anywhere is a reverse proxy which adds CORS headers to the proxied request. Request URL is taken from the path Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the proxy process. An attacker can access internal-only endpoint...

DEBIAN-CVE-2025-8869

When extracting a tar archive pip may not check symbolic links point into the extraction directory if the tarfile module doesn't implement PEP 706. Note that upgrading pip to a "fixed" version for this vulnerability doesn't fix all known vulnerabilities that are remediated by using a Python versi...