EUVD-2024-48578

Malicious code in bioql PyPI...

EUVD-2023-26998

Malicious code in bioql PyPI...

EUVD-2025-22720

Malicious code in bioql PyPI...

EUVD-2025-10404

Malicious code in bioql PyPI...

EUVD-2024-46290

Malicious code in bioql PyPI...

EUVD-2024-44829

Malicious code in bioql PyPI...

EUVD-2022-32906

Malicious code in bioql PyPI...

EUVD-2024-20755

Malicious code in bioql PyPI...

EUVD-2023-45633

Malicious code in bioql PyPI...

EUVD-2024-43183

Malicious code in bioql PyPI...

EUVD-2022-38798

Malicious code in bioql PyPI...

EUVD-2025-14838

Malicious code in bioql PyPI...

EUVD-2025-13912

Malicious code in bioql PyPI...

Logo TigerWings ERP 安全漏洞

Logo TigerWings ERP is an enterprise resource management software from Logo Turkey. A security vulnerability exists in Logo TigerWings ERP version 01.01.00 through versions prior to 3.03.00, which stems from the use of hard-coded credentials and could result in reading sensitive constants in an...

PT-2025-40517

Name of the Vulnerable Software and Affected Versions Logo Software Inc. TigerWings ERP versions 01.01.00 through 3.02.99 Description The software contains a Use of Hard-coded Credentials issue, allowing for the reading of sensitive constants within the executable. Recommendations Update to versi...

Canonical LXD Arbitrary File Read via Template Injection in Snapshot Patterns

Impact In LXD's instance snapshot creation functionality, the Pongo2 template engine is used in the snapshots.pattern configuration for generating snapshot names. While code execution functionality has not been found in this template engine, it has file reading capabilities, creating a...

Traccar 安全漏洞

Traccar is a Java-based website builder that provides GPS tracking capabilities from Traccar, Inc. in the United States. The software supports more than 170 GPS protocols and more than 1500 models of GPS tracking devices.Traccar can be used with any major SQL database system. It also provides an...

A week in security (September 22 – September 28)

Last week on Malwarebytes Labs: Hackers threaten parents: Get nursery to pay ransom or we leak your child’s data Google and Flo to pay $56 million after misusing users’ health data Neon App pays users to record their phone calls, sells data for AI training updated New SVG-based phishing campaign ...

The vulnerability of the st.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the st.c component in the Linux operating system’s kernel is related to reading data beyond the allowable buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of components such as drivers, GPU, DRM, and XE in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drivers/gpu/drm/xe components of the Linux operating system is related to reading data from buffer files beyond their allowable limits. Exploiting this vulnerability can allow an attacker to cause a service failure...