EUVD-2015-4503

Malware in sbrugna...

EUVD-2015-7129

Malware in sbrugna...

EUVD-2020-2552

Malware in sbrugna...

EUVD-2009-0832

Malware in sbrugna...

EUVD-2006-1228

Malware in sbrugna...

CVE-2025-59733 Heap-buffer-overflow write in FFmpeg EXR dwa_uncompress

When decoding an OpenEXR file that uses DWAA or DWAB compression, there's an implicit assumption that all image channels have the same pixel type and size, and that if there are four channels, the first four are "B", "G", "R" and "A". The channel parsing code can be found in decodeheader. The...

EUVD-2022-40581

Malicious code in bioql PyPI...

EUVD-2024-32414

Malicious code in bioql PyPI...

EUVD-2023-40663

Malicious code in bioql PyPI...

EUVD-2023-1909

Malicious code in bioql PyPI...

x86/efistub: Call mixed mode boot services on the firmware's stack

...

Malicious code in org.mixedrealitytoolkit.uxcore (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47706 Malicious code in org.mixedrealitytoolkit.uxcore (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in org.mixedrealitytoolkit.standardassets (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47705 Malicious code in org.mixedrealitytoolkit.standardassets (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in org.mixedrealitytoolkit.spatialmanipulation (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47704 Malicious code in org.mixedrealitytoolkit.spatialmanipulation (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in org.mixedrealitytoolkit.core (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47703 Malicious code in org.mixedrealitytoolkit.core (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-59420

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.4, Authlib’s JWS verification accepts tokens that declare unknown critical header parameters crit, violating RFC 7515 “must‑understand” semantics. An attacker can craft a signed token with a critical...