EUVD-2025-19259

Malicious code in bioql PyPI...

EUVD-2025-28868

Malicious code in bioql PyPI...

EUVD-2022-35362

Malicious code in bioql PyPI...

EUVD-2022-25069

Malicious code in bioql PyPI...

EUVD-2025-25104

Malicious code in bioql PyPI...

EUVD-2025-26138

Malicious code in bioql PyPI...

EUVD-2023-54493

Malicious code in bioql PyPI...

EUVD-2023-25270

Malicious code in bioql PyPI...

EUVD-2023-36341

Malicious code in bioql PyPI...

EUVD-2025-8496

Malicious code in bioql PyPI...

EUVD-2025-26291

Malicious code in bioql PyPI...

EUVD-2025-26297

Malicious code in bioql PyPI...

EUVD-2022-4931

Malicious code in bioql PyPI...

EUVD-2025-26151

Malicious code in bioql PyPI...

EUVD-2023-38403

Malicious code in bioql PyPI...

modules/rlm_unix/rlm_unix.c in FreeRADIUS before 2.2.0, when unix mode is enabled for user authentication, does not properly check the password expiration in /etc/shadow, which allows remote authenticated users to authenticate using an expired password.

...

CVE-2025-39910 mm/vmalloc, mm/kasan: respect gfp mask in kasan_populate_vmalloc()

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc, mm/kasan: respect gfp mask in kasanpopulatevmalloc kasanpopulatevmalloc and its helpers ignore the caller's gfpmask and always allocate memory using the hardcoded GFPKERNEL flag. This makes them inconsistent with...

kernel: drm/gem: Acquire references on GEM handles for framebuffers

In the Linux kernel, the following vulnerability has been resolved: drm/gem: Acquire references on GEM handles for framebuffers A GEM handle can be released while the GEM buffer object is attached to a DRM framebuffer. This leads to the release of the dma-buf backing the buffer object, if any. 1...

CVE-2025-57295

H3C devices running firmware version NX15V100R015 are vulnerable to unauthorized access due to insecure default credentials . The root user account has no password set, and the H3C user account uses the default password "admin"; both are stored in the /etc/shadow file. Attackers with network acce...

CVE-2025-57295: Weak Password Requirements

H3C devices running firmware version NX15V100R015 are vulnerable to unauthorized access due to insecure default credentials. The root user account has no password set, and the H3C user account uses the default password "admin," both stored in the /etc/shadow file. Attackers with network access ca...