EUVD-2022-3274

Malicious code in bioql PyPI...

EUVD-2025-12595

Malicious code in bioql PyPI...

EUVD-2024-50985

Malicious code in bioql PyPI...

EUVD-2024-54989

Malicious code in bioql PyPI...

EUVD-2022-5032

Malicious code in bioql PyPI...

CVE-2025-38626 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38626 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38732 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38732 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

NewStart CGSL MAIN 6.06 : lvm2 Vulnerability (NS-SA-2025-0216)

The remote NewStart CGSL host, running version MAIN 6.06, has lvm2 packages installed that are affected by a vulnerability: - The cluster logical volume manager daemon clvmd in lvm2-cluster in LVM2 before 2.02.72, as used in Red Hat Global File System GFS and other products, does not verify clien...

PT-2025-39711

Name of the Vulnerable Software and Affected Versions algoliasearch-helper versions 2.0.0-rc1 through 3.11.2 Description The package contains a Prototype Pollution issue in the merge function within the merge.js file. This allows modification of the constructor.prototype, potentially leading to...

[SECURITY] [DSA 6012-1] nncp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6012-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 26, 2025 https://www.debian.org/security/faq -...

Exploit for CVE-2025-39866

CVE-2025-39866 - use-after-free Author: Byte Reaper...

CVE-2025-9115

The Etsy Shop WordPress plugin before 3.0.7 does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers...

CVE-2025-43819

A Insufficient Session Expiration vulnerability in the Liferay Portal 7.4.3.121 through 7.3.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.3, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, and 2024.Q1.1 through 2024.Q1.12 is allow an remote non-authenticated attacker to reuse old...

CVE-2025-43819

CVE-2025-43819 affects Liferay Portal (7.3.3.131–7.4.3.121) and Liferay DXP (2024.Q1.1–Q4.3 across 2024.Q1–Q4). Root cause is Insufficient Session Expiration via the SLO API, allowing remote, unauthenticated attackers to reuse a stale session and gain an authenticated context. Impact is potential...

magix-combine 安全漏洞

magix-combine is a js library from thx open source. A security vulnerability exists in magix-combine 1.2.10 and earlier versions, which stems from prototype contamination in the util-deps.addFileDepend function, which could lead to a denial-of-service attack...

CVE-2025-9115

The Etsy Shop WordPress plugin before 3.0.7 does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers...

CVE-2025-9115

The Etsy Shop WordPress plugin versions prior to 3.0.7 is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is the failure to escape or sanitize the $_SERVER['REQUEST_URI'] parameter before outputting it back within an attribute. This flaw could allow an attacker to inject and e...

CVE-2025-9115: Undefined Security Weakness

The Etsy Shop WordPress plugin before 3.0.7 does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers...

Rain: Transiently Leaking Data from Public Clouds Using Old Vulnerabilities

Given their vital importance for governments and enterprises around the world, we need to trust public clouds to provide strong security guarantees even in the face of advanced attacks and hardware vulnerabilities. While transient execution vulnerabilities, such as Spectre, have been in the...

SUSE CVE-2025-39847

In the Linux kernel, the following vulnerability has been resolved: ppp: fix memory leak in padcompressskb If allocskb fails in padcompressskb, it returns NULL without releasing the old skb. The caller does: skb = padcompressskbppp, skb; if !skb goto drop; drop: kfreeskbskb; When padcompressskb...