EUVD-2025-23280

Malicious code in bioql PyPI...

EUVD-2024-26166

Malicious code in bioql PyPI...

EUVD-2022-48683

Malicious code in bioql PyPI...

EUVD-2024-31679

Malicious code in bioql PyPI...

EUVD-2021-28604

Malicious code in bioql PyPI...

EUVD-2023-43780

Malicious code in bioql PyPI...

EUVD-2023-37366

Malicious code in bioql PyPI...

EUVD-2023-43891

Malicious code in bioql PyPI...

EUVD-2021-34249

Malicious code in bioql PyPI...

EUVD-2024-31208

Malicious code in bioql PyPI...

EUVD-2023-0555

Malicious code in bioql PyPI...

EUVD-2022-32045

Malicious code in bioql PyPI...

EUVD-2022-42721

Malicious code in bioql PyPI...

EUVD-2025-6250

Malicious code in bioql PyPI...

EUVD-2023-43773

Malicious code in bioql PyPI...

EUVD-2025-9432

Malicious code in bioql PyPI...

fetchmail -- potential crash when authenticating to SMTP server

Matthias Andree reports: fetchmail's SMTP client, when configured to authenticate, is susceptible to a protocol violation where, when a trusted but malicious or malfunctioning SMTP server responds to an authentication request with a "334" code but without a following blank on the line, it will...

SUSE SLES15 / openSUSE 15 Security Update : nginx (SUSE-SU-2025:03444-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03444-1 advisory. - CVE-2025-53859:?the server side may leak arbitrary bytes during the NGINX SMTP authentication process bsc1248070. ...

Security update for nginx

This update for nginx fixes the following issues: CVE-2025-53859:Â the server side may leak arbitrary bytes during the NGINX SMTP authentication process bsc1248070. CVE-2025-23419: session resumption can bypass client certificate authentication requirements using TLSv1.3 bsc1236851. Patch...

VMware vCenter SMTP Header Injection Vulnerability

VMware vCenter is a virtualization management software from VMware. An SMTP header injection vulnerability exists in VMware vCenter, which can be exploited by an attacker to manipulate notification emails for scheduled tasks...