PT-2025-52646

Name of the Vulnerable Software and Affected Versions Mattermost versions 11.1.x through 11.1.0 Mattermost versions 11.0.x through 11.0.5 Mattermost versions 10.12.x through 10.12.3 Mattermost versions 10.11.x through 10.11.7 Mattermost Jira plugin versions 4.4.0 and earlier Description The...

TencentOS Server 3: libssh (TSSA-2022:0067)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0067 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

CVE-2025-11844 XPath Injection in Hugging Face Smolagents search_item_ctrl_f Function

Hugging Face Smolagents version 1.20.0 contains an XPath injection vulnerability in the searchitemctrlf function located in src/smolagents/visionwebbrowser.py. The function constructs an XPath query by directly concatenating user-supplied input into the XPath expression without proper sanitizatio...

EUVD-2012-5116

Malware in sbrugna...

EUVD-2014-2880

Malware in sbrugna...

EUVD-2019-3197

Malware in sbrugna...

EUVD-2017-1597

Malware in sbrugna...

EUVD-2024-29862

Malicious code in bioql PyPI...

EUVD-2022-28553

Malicious code in bioql PyPI...

EUVD-2023-0150

Malicious code in bioql PyPI...

EUVD-2024-44829

Malicious code in bioql PyPI...

EUVD-2024-29861

Malicious code in bioql PyPI...

EUVD-2024-2682

Malicious code in bioql PyPI...

EUVD-2023-33015

Malicious code in bioql PyPI...

Exploit for CVE-2024-32019

Privilege Escalation via ndsudo Netdata Local Exploit Thi...

Exploit for Link Following in Git

💥 CVE-2024-32002 – Git Submodule Path Injection PoC 🧠 Visã...

RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update (Important) (RHSA-2025:16487)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:16487 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT...

django: Django Path Injection Vulnerability

A flaw was found in Django. The request.path component of HTTP requests is not properly escaped when included in internal response logging, allowing remote attackers to manipulate log output through crafted URLs. This vulnerability allows an attacker to inject arbitrary content into Django's...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update (Moderate) (RHSA-2025:14686)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:14686 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT...