1077 matches found
EUVD-2025-21025
Malicious code in bioql PyPI...
EUVD-2023-1637
Malicious code in bioql PyPI...
EUVD-2025-9741
Malicious code in bioql PyPI...
EUVD-2022-54059
Malicious code in bioql PyPI...
EUVD-2022-15464
Malicious code in bioql PyPI...
EUVD-2022-53945
Malicious code in bioql PyPI...
EUVD-2022-0364
Malicious code in bioql PyPI...
EUVD-2024-19635
Malicious code in bioql PyPI...
OESA-2025-2339 python-pip security update
pip is the package installer for Python. You can use pip to install packages from the Python Package Index and other indexes. %global bashcompdir %b=$pkg-config --variable=completionsdir bash-completion 2/dev/null; echo $b:-/bashcompletion.d Name: python-pip Version: 23.3.1 Release: 5 Summary: A...
CVE-2025-10585
Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2025-10890
Side-channel information leakage in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...
pip 安全漏洞
pip is a Python package installer open-sourced by the Python Packaging Authority. A security vulnerability exists in pip that stems from a failure to check whether symbolic links point to extracted directories, which could lead to a path traversal attack...
Chinese Network Selling Thousands of Fake US and Canadian IDs
New investigation exposes a China-based ring that sold over 6,500 fake United States and Canadian IDs using well-planned covert packaging. Learn how this operation threatens national security and enables financial crime...
[SECURITY] Fedora 42 Update: python-pip-24.3.1-5.fc42
pip is a package management system used to install and manage software packag es written in Python. Many packages can be found in the Python Package Index PyPI. pip is a recursive acronym that can stand for either "Pip Installs Packages" or "Pip Installs Python"...
SUSE: Security Advisory (SUSE-SU-2025:03224-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-10527
Sandbox escape due to use-after-free in the Graphics: Canvas2D component. This vulnerability affects Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...
Debian dla-4301 : python-django-doc - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4301 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4301-1 [email protected] https://www.debian.org/lts/security/...
cargo-packaging-1.3.0+0-2.1 on GA media (moderate)
cargo-packaging-1.3.0+0-2.1 on GA media Announcement ID: openSUSE-SU-2025:15552-1 Rating: moderate Cross-References: CVE-2025-58160 CVSS scores: CVE-2025-58160 SUSE : 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N CVE-2025-58160 SUSE : 2.3...
