EUVD-2022-1468

Malicious code in bioql PyPI...

EUVD-2023-0044

Malicious code in bioql PyPI...

EUVD-2024-37149

Malicious code in bioql PyPI...

EUVD-2024-2359

Malicious code in bioql PyPI...

EUVD-2023-30253

Malicious code in bioql PyPI...

EUVD-2022-3769

Malicious code in bioql PyPI...

EUVD-2023-2100

Malicious code in bioql PyPI...

EUVD-2023-24178

Malicious code in bioql PyPI...

EUVD-2025-16192

Malicious code in bioql PyPI...

PT-2025-40512

Name of the Vulnerable Software and Affected Versions Versions prior to the fix where the 'Bind password' value is reset on 'Host' change. Description A Super Admin account can potentially leak the LDAP 'Bind password' value by changing the LDAP 'Host' to a rogue LDAP server. The 'Bind password'...

Realtek SD Card Reader Driver Security Update

Potential vulnerabilities have been identified in the HP PC products that are configured with certain Realtek SD card readers, which might allow escalation of privilege or information disclosure. Updated Realtek SD card reader drivers have been released for mitigation. Realtek has released update...

Exploring and Exploiting the Resource Isolation Attack Surface of WebAssembly Containers

Recently, the WebAssembly or Wasm technology has been rapidly evolving, with many runtimes actively under development, providing cross-platform secure sandboxes for Wasm modules to run as portable containers. Compared with Docker, which isolates applications at the operating system level, Wasm...

Unbreakable Enterprise kernel security update

5.4.17-2136.347.6.1 - x86/vmscape: Warn when STIBP is disabled with SMT Pawan Gupta Orabug: 38343661 - x86/bugs: Move cpubugssmtupdate down Pawan Gupta Orabug: 38343661 - x86/vmscape: Enable the mitigation Pawan Gupta Orabug: 38343661 - x86/vmscape: Add conditional IBPB mitigation Pawan Gupta...

CVE-2025-54119

A flaw was found in php-adodb. Improper escaping of query parameters allows an attacker to execute arbitrary SQL statements. A remote attacker can leverage this vulnerability by crafting a malicious query. This issue can lead to unauthorized data access or modification. Mitigation Mitigation for...

CVE-2025-6004

A flaw was found in github.com/hashicorp/vault. The user lockout feature for Userpass and LDAP authentication methods can be bypassed, allowing an attacker to circumvent account lockout restrictions. This circumvention occurs without requiring prior authentication or knowledge of user credentials...

CVE-2025-48073

A NULL pointer dereference flaw was found in OpenEXR. When reading a deep scanline image with a large sample count in reduceMemory mode, it is possible to crash a target application with a NULL pointer dereference in a write operation. Mitigation Mitigation for this issue is either not available ...

CVE-2025-48072

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. Version 3.3.2 is vulnerable to a heap-based buffer overflow during a read operation due to bad pointer math when decompressing DWAA-packed scan-line EXR...

GHSA-FM6C-F59H-7MMG MS SWIFT Remote Code Execution via unsafe PyYAML deserialization

Description A Remote Code Execution RCE vulnerability exists in the modelscope/ms-swift project due to unsafe use of yaml.load in combination with vulnerable versions of the PyYAML library ≤ 5.3.1. The issue resides in the tests/run.py script, where a user-supplied YAML configuration file is...

Exploit for Use After Free in Microsoft

🚨 CVE-2025-29824 Exploit: PipeMagic Ransomware Chain 📌 Critical...

📄 Create School Management System 1.0 Cross Site Scripting

Create School Management System version 1.0 suffers from a persistent cross site scripting vulnerabilities. Hello Full Disclosure community, I’m sharing details of a recently assigned CVE affecting a widely used open‑source School Management System PHP/MySQL...