EUVD-2025-15101

Malicious code in bioql PyPI...

EUVD-2023-59795

Malicious code in bioql PyPI...

EUVD-2025-15100

Malicious code in bioql PyPI...

EUVD-2025-28622

Malicious code in bioql PyPI...

EUVD-2022-35331

Malicious code in bioql PyPI...

EUVD-2025-25428

Malicious code in bioql PyPI...

EUVD-2025-8052

Malicious code in bioql PyPI...

EUVD-2025-8053

Malicious code in bioql PyPI...

EUVD-2025-12595

Malicious code in bioql PyPI...

EUVD-2024-54010

Malicious code in bioql PyPI...

CVE-2025-38732 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38732 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-38626 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38626 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

NewStart CGSL MAIN 6.06 : lvm2 Vulnerability (NS-SA-2025-0216)

The remote NewStart CGSL host, running version MAIN 6.06, has lvm2 packages installed that are affected by a vulnerability: - The cluster logical volume manager daemon clvmd in lvm2-cluster in LVM2 before 2.02.72, as used in Red Hat Global File System GFS and other products, does not verify clien...

PT-2025-39711

Name of the Vulnerable Software and Affected Versions algoliasearch-helper versions 2.0.0-rc1 through 3.11.2 Description The package contains a Prototype Pollution issue in the merge function within the merge.js file. This allows modification of the constructor.prototype, potentially leading to...

[SECURITY] [DSA 6012-1] nncp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6012-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 26, 2025 https://www.debian.org/security/faq -...

Exploit for CVE-2025-39866

CVE-2025-39866 - use-after-free Author: Byte Reaper...

CVE-2025-9115

The Etsy Shop WordPress plugin before 3.0.7 does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers...

CVE-2025-43819

A Insufficient Session Expiration vulnerability in the Liferay Portal 7.4.3.121 through 7.3.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.3, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, and 2024.Q1.1 through 2024.Q1.12 is allow an remote non-authenticated attacker to reuse old...

CVE-2025-43819

CVE-2025-43819 affects Liferay Portal (7.3.3.131–7.4.3.121) and Liferay DXP (2024.Q1.1–Q4.3 across 2024.Q1–Q4). Root cause is Insufficient Session Expiration via the SLO API, allowing remote, unauthenticated attackers to reuse a stale session and gain an authenticated context. Impact is potential...

magix-combine 安全漏洞

magix-combine is a js library from thx open source. A security vulnerability exists in magix-combine 1.2.10 and earlier versions, which stems from prototype contamination in the util-deps.addFileDepend function, which could lead to a denial-of-service attack...