EUVD-2024-53316

Malicious code in bioql PyPI...

EUVD-2025-16795

Malicious code in bioql PyPI...

EUVD-2021-7368

Malicious code in bioql PyPI...

EUVD-2023-35857

Malicious code in bioql PyPI...

EUVD-2025-25541

Malicious code in bioql PyPI...

EUVD-2025-9349

Malicious code in bioql PyPI...

EUVD-2025-27216

Malicious code in bioql PyPI...

EUVD-2024-32319

Malicious code in bioql PyPI...

EUVD-2025-27589

Malicious code in bioql PyPI...

EUVD-2025-26758

Malicious code in bioql PyPI...

kernel: ceph: fix race condition validating r_parent before applying state

In the Linux kernel, the following vulnerability has been resolved: ceph: fix race condition validating rparent before applying state Add validation to ensure the cached parent directory inode matches the directory info in MDS replies. This prevents client-side race conditions where concurrent...

pkexec, when used with --user nonpriv, allows local users to escape to the parent session

...

AZL-68001 CVE-2025-39927 affecting package kernel 6.6.126.1-1

In the Linux kernel, the following vulnerability has been resolved: ceph: fix race condition validating rparent before applying state Add validation to ensure the cached parent directory inode matches the directory info in MDS replies. This prevents client-side race conditions where concurrent...

CVE-2025-39927

CVE-2025-39927 relates to Ceph in the Linux kernel where a race condition could cause r_parent to reference the wrong directory when processing MDS replies. The fix adds validation to ensure the cached parent inode matches the MDS-provided directory info before applying state changes, preventing ...

CVE-2025-39927 ceph: fix race condition validating r_parent before applying state

In the Linux kernel, the following vulnerability has been resolved: ceph: fix race condition validating rparent before applying state Add validation to ensure the cached parent directory inode matches the directory info in MDS replies. This prevents client-side race conditions where concurrent...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unvalidated rparent leading to a contention condition that could cause a state change to be applied to th...

Hackers threaten parents: Get nursery to pay ransom or we leak your child’s data

Just when you think extortionists can’t sink any lower, along comes a lowlife that manages to surprise you. The BBC reported that a group calling itself "Radiant" claims to have stolen sensitive data related to around 8,000 children from nursery chain Kido, which operates in the UK, US, China, an...

CVE-2025-59430

Mesh Connect JS SDK contains JS libraries for integrating with Mesh Connect. Prior to version 3.3.2, the lack of sanitization of URLs protocols in the createLink.openLink function enables the execution of arbitrary JavaScript code within the context of the parent page. This is technically...

Cross-site Scripting (XSS)

Overview @meshconnect/web-link-sdk is an A client-side JS library for integrating with Mesh Connect Affected versions of this package are vulnerable to Cross-site Scripting XSS via the createLink.openLink function. An attacker can execute arbitrary JavaScript code in the context of the parent pag...

CVE-2025-59430 Mesh Connect JS SDK Vulnerable to Cross Site Scripting via createLink.openLink

Mesh Connect JS SDK contains JS libraries for integrating with Mesh Connect. Prior to version 3.3.2, the lack of sanitization of URLs protocols in the createLink.openLink function enables the execution of arbitrary JavaScript code within the context of the parent page. This is technically...