EUVD-2021-1243

Malware in sbrugna...

EUVD-2023-25794

Malicious code in bioql PyPI...

EUVD-2024-39573

Malicious code in bioql PyPI...

EUVD-2022-4293

Malicious code in bioql PyPI...

EUVD-2022-7109

Malicious code in bioql PyPI...

[SECURITY] Fedora 41 Update: rust-secret-service-5.1.0-1.fc41

Library to interface with Secret Service API...

[SECURITY] Fedora 43 Update: rust-secret-service-5.1.0-1.fc43

Library to interface with Secret Service API...

[SECURITY] Fedora 42 Update: rust-secret-service-5.1.0-1.fc42

Library to interface with Secret Service API...

OESA-2025-2125 krb5 security update

Kerberos is a network authentication protocol. It is designed to provide strong authentication for client/server applications by using secret-key cryptography. Security Fixes: A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due ...

Researchers Warn of Sitecore Exploit Chain Linking Cache Poisoning and Remote Code Execution

Three new security vulnerabilities have been disclosed in the Sitecore Experience Platform that could be exploited to achieve information disclosure and remote code execution. The flaws, per watchTowr Labs, are listed below - CVE-2025-53693 - HTML cache poisoning through unsafe reflections...

Linux Distros Unpatched Vulnerability : CVE-2018-19358

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNOME Keyring through 3.28.2 allows local users to retrieve login credentials via a Secret Service API call and the D-Bus interface if the keyring is unlocked, ...

MAL-2025-29131 Malicious code in phixius-nacha-csp-service-api (npm)

The package phixius-nacha-csp-service-api was found to contain malicious code...

Malicious code in phixius-nacha-csp-service-api (npm)

The package phixius-nacha-csp-service-api was found to contain malicious code...

Oracle Business Intelligence Publisher (OAS) (July 2025 CPU)

The 7.6.0.0.0, and 8.2.0.0.0 versions of Oracle Business Intelligence Publisher installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2025 CPU advisory. - Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Service API Apac...

CVE-2025-25207

The Authorino service in the Red Hat Connectivity Link is the authorization service for zero trust API security. Authorino allows the users with developer persona to add callbacks to be executed to HTTP endpoints once the authorization process is completed. It was found that an attacker with...

CVE-2024-4539

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2 where abusing the API to filter branch and tags could lead to Denial of Service...

CVE-2021-32579

Acronis True Image prior to 2021 Update 4 for Windows and Acronis True Image prior to 2021 Update 5 for macOS allowed an unauthenticated attacker who has a local code execution ability to tamper with the micro-service API...

CVE-2021-35079

Improper validation of permissions for third party application accessing Telephony service API can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile...

actinia-core (4.14.1), alg-service-api-p12 (>=1.0.3, <=1.0.5) +5 more potentially affected by CVE-2025-47273 via setuptools (70.1.0)

setuptools PYPI version 70.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - actinia-core 4.14.1 - alg-service-api-p12 =1.0.3, =1.0.0, =0.0.1, =1.0.0, =1.0.1 - oqc-qcaas-client 3.6.1 Source cves: CVE-2025-47273 Sourc...

actinia-core (4.14.1), alg-service-api-p12 (>=1.0.3, <=1.0.5) +5 more potentially affected by CVE-2025-47273 via setuptools (70.1.0)

setuptools PYPI version 70.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - actinia-core 4.14.1 - alg-service-api-p12 =1.0.3, =1.0.0, =0.0.1, =1.0.0, =1.0.1 - oqc-qcaas-client 3.6.1 Source cves: CVE-2025-47273 Sourc...