EUVD-2024-54775

Malicious code in bioql PyPI...

EUVD-2022-28675

Malicious code in bioql PyPI...

EUVD-2025-14498

Malicious code in bioql PyPI...

EUVD-2024-0401

Malicious code in bioql PyPI...

EUVD-2025-21044

Malicious code in bioql PyPI...

EUVD-2024-3236

Malicious code in bioql PyPI...

EUVD-2024-28187

Malicious code in bioql PyPI...

EUVD-2021-30911

Malicious code in bioql PyPI...

EUVD-2024-0629

Malicious code in bioql PyPI...

EUVD-2024-21278

Malicious code in bioql PyPI...

RLSA-2025:7517 Important: sqlite security update

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...

RLSA-2025:9120 Important: libvpx security update

The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format. Security Fixes: libvpx: Double-free in libvpx encoder CVE-2025-5283 For more details about the security issues, including the impac...

CVE-2025-52857 QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

CVE-2025-61592 Cursor CLI: Arbitrary Code Execution Possible through Permissive CLI Config

Cursor is a code editor built for programming with AI. In versions 1.7 and below, automatic loading of project-specific CLI configuration from the current working directory /.cursor/cli.json could override certain global configurations in Cursor CLI. This allowed users running the CLI inside a...

PT-2025-40546

Name of the Vulnerable Software and Affected Versions Qsync Central versions prior to 5.0.0.1 Description A flaw exists in Qsync Central where unrestricted resource allocation can occur. A remote attacker who obtains a user account may be able to prevent other systems, applications, or processes...

PT-2025-40588

Name of the Vulnerable Software and Affected Versions Qsync Central versions prior to 5.0.0.2 Description An SQL injection issue exists in Qsync Central. A remote attacker who obtains a user account can potentially execute unauthorized code or commands. The vulnerability is exploitable through SQ...

PT-2025-40582

Name of the Vulnerable Software and Affected Versions QNAP versions prior to QTS 5.2.6.3195 build 20250715 QNAP versions prior to QuTS hero h5.2.6.3195 build 20250715 Description A flaw exists where a remote attacker with administrator privileges can trigger a denial-of-service DoS condition...

Dell Client BIOS Improper SMM Communication Buffer Verification (DSA-2024-104)

The Dell BIOS on the remote device is missing a security patch and is, therefore, affected by an Improper SMM communication buffer verification vulnerability. A physical high privileged attacker could potentially exploit this vulnerability leading to arbitrary writes to SMRAM. Note that Nessus ha...

CVE-2025-38648 affecting package kernel for versions less than 6.6.104.2-1

CVE-2025-38648 affecting package kernel for versions less than 6.6.104.2-1. An upgraded version of the package is available that resolves this issue...

PT-2025-40050

Impact send hooks can spend more gas than what's remained in tx, combined with recursive calls in the wasm contract, can amplify the gas consumption exponentially. Patches It's patched in v4.0.2 and v5.0.0 Workarounds Is there a way for users to fix or remediate the vulnerability without upgradin...