EUVD-2023-25561

Malicious code in bioql PyPI...

EUVD-2023-47088

Malicious code in bioql PyPI...

EUVD-2024-30776

Malicious code in bioql PyPI...

EUVD-2023-35440

Malicious code in bioql PyPI...

EUVD-2022-37595

Malicious code in bioql PyPI...

EUVD-2023-53635

Malicious code in bioql PyPI...

EUVD-2023-25801

Malicious code in bioql PyPI...

EUVD-2022-52571

Malicious code in bioql PyPI...

US Disrupts Massive Cell Phone Array in New York

This is a weird story: The US Secret Service disrupted a network of telecommunications devices that could have shut down cellular systems as leaders gather for the United Nations General Assembly in New York City. The agency said on Tuesday that last month it found more than 300 SIM servers and...

Google Pay, Drug Bots, and SIM Swaps: How Old Leaks and New Vulnerabilities Power Attacks

It starts with something simple: a CAPTCHA box on your screen. You type the number you see, because of course you do. That’s what humans do online. But what if that “CAPTCHA” wasn’t a CAPTCHA at all? In this post, I’ll walk you through how old data leaks, lazy telecom verification, and a...

Linux Distros Unpatched Vulnerability : CVE-2025-27466

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. There are multiple issues related...

ALPINE-CVE-2025-27466

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. There are multiple issues related to the handling and accessing of guest memory pages in the viridian code: 1. A NULL pointer dereference in the updating of the reference...

CVE-2025-27466

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. There are multiple issues related to the handling and accessing of guest memory pages in the viridian code: 1. A NULL pointer dereference in the updating of the reference...

UBUNTU-CVE-2025-58143

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. There are multiple issues related to the handling and accessing of guest memory pages in the viridian code: 1. A NULL pointer dereference in the updating of the reference...

CVE-2025-58143

CVE-2025-58143 is part of multiple viridian-related issues in Xen. The available details describe a race condition in the mapping of the reference TSC page: a guest can trigger Xen to free a page that still remains in the guest physical to machine (p2m) page tables. This is categorized under a se...

CVE-2025-27466

CVE-2025-27466 affects the Xen hypervisor due to a NULL pointer dereference in updating the reference TSC area. The CVE set also covers related issues CVE-2025-58142 (NULL pointer dereference when assuming the SIM page is mapped for a synthetic timer) and CVE-2025-58143 (race in mapping the refer...

Arbitrary Code Injection

Overview simstudio is a Sim Studio CLI - Run Sim Studio with a single command Affected versions of this package are vulnerable to Arbitrary Code Injection via the route.ts function. An attacker can execute arbitrary code by supplying crafted input to the code argument. Remediation A fix was pushe...

CVE-2025-10097

A vulnerability was identified in SimStudioAI sim up to 1.0.0. This impacts an unknown function of the file apps/sim/app/api/function/execute/route.ts. The manipulation of the argument code leads to code injection. The attack is possible to be carried out remotely...

CVE-2025-10097 SimStudioAI sim route.ts code injection

A vulnerability was identified in SimStudioAI sim up to 1.0.0. This impacts an unknown function of the file apps/sim/app/api/function/execute/route.ts. The manipulation of the argument code leads to code injection. The attack is possible to be carried out remotely...

Sim Studio 代码注入漏洞

Sim Studio is an AI agent workflow builder for Sim Studio open source. A code injection vulnerability exists in Sim Studio 1.0.0 and earlier versions, which stems from the fact that incorrect manipulation of the parameter code may lead to code injection...