EUVD-2024-1124

Malicious code in bioql PyPI...

EUVD-2022-52739

Malicious code in bioql PyPI...

EUVD-2025-13047

Malicious code in bioql PyPI...

EUVD-2025-13149

Malicious code in bioql PyPI...

EUVD-2022-40026

Malicious code in bioql PyPI...

EUVD-2024-3526

Malicious code in bioql PyPI...

EUVD-2022-0358

Malicious code in bioql PyPI...

EUVD-2022-32144

Malicious code in bioql PyPI...

EUVD-2021-29721

Malicious code in bioql PyPI...

EUVD-2025-22871

Malicious code in bioql PyPI...

EUVD-2022-43808

Malicious code in bioql PyPI...

EUVD-2025-0149

Malicious code in bioql PyPI...

grafana-pcp security update

An update is available for grafana-pcp. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Grafana plugin for Performance Co-Pilot includes datasources for...

CVE-2025-10547

An uninitialized variable in the HTTP CGI request arguments processing component of Vigor Routers running DrayOS may allow an attacker the ability to perform RCE on the appliance through memory corruption...

CVE-2025-54477 Joomla! Core - [20250902] User-Enumeration in passkey authentication method

Improper handling of authentication requests lead to a user enumeration vector in the passkey authentication method...

CVE-2025-59139

CVE-2025-59139 affects the Hono web framework (pre-4.9.7). A flaw in the bodyLimit middleware allowed bypassing the configured request body size limit when conflicting headers were present, because Content-Length could be prioritized over Transfer-Encoding: chunked. The HTTP spec requires Transfe...

CLSA-2025-1757666519 xorg-x11-server: Fix of CVE-2025-49178

CVE-2025-49178: fix request handling flaw causing potential denial of service...

CLSA-2025-1757662405 xorg-x11-server: Fix of CVE-2025-49178

CVE-2025-49178: fix request handling flaw causing potential denial of service...

The vulnerability of the GLPI system’s request, incident, and asset inventory management, related to insufficient validation of requests on the server side, allows a perpetrator to carry out an SSRF attack.

The vulnerability of the GLPI system for managing requests, incidents, and inventory of computer equipment is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow a malicious actor to carry out an SSRF attack...

Hono's flaw in URL path parsing could cause path confusion

Summary A flaw in the getPath utility function could allow path confusion and potential bypass of proxy-level ACLs e.g. Nginx location blocks. Details The original implementation relied on fixed character offsets when parsing request URLs. Under certain malformed absolute-form Request-URIs, this...