Malicious code in bihndler (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in bhsndler (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in baundler (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

BIT-PYTHON-2024-6232 Regular-expression DoS when parsing TarFile headers

There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives...

ROOT-APP-PYPI-GHSA-956X-8GVW-WG5V GHSA-956x-8gvw-wg5v in GitPython - Patched by Root

Root has patched GHSA-956x-8gvw-wg5v in the GitPython package for Root:PyPI. Multiple fixed versions available...

CVE-2026-25265 Creation of Temporary File with Insecure Permissions in Qualcomm Software Center

Privilege escalation due to weak configuration while temporary file handling...

CVE-2026-25265

CVE-2026-25265 affects Qualcomm Software Center , where a privilege escalation is possible due to the creation of a temporary file with insecure permissions . The root cause is a weak configuration during temporary file handling, allowing a local attacker with low privileges to gain full control ...

CVE-2026-25265 Creation of Temporary File with Insecure Permissions in Qualcomm Software Center

Privilege escalation due to weak configuration while temporary file handling...

CVE-2026-25264 Uncontrolled Search Path Element in Qualcomm Software Center

Privilege escalation due to weak configuration during package extraction process...

CVE-2026-25264

Qualcomm Software Center is affected by an uncontrolled search path element vulnerability arising from weak configuration during its package extraction process. A local user with low privileges can exploit this to escalate privileges, with changed scope and high impact on confidentiality, integri...

CVE-2026-25264 Uncontrolled Search Path Element in Qualcomm Software Center

Privilege escalation due to weak configuration during package extraction process...

CVE-2026-25255 Exposed function in Qualcomm Package Manager and Qualcomm Software Center.

Exposed dangerous function lead to privilege escalation via gRPC server...

CVE-2026-25254 Improper authorization in Qualcomm Software Center

Improper authorization leads to Remote Code Execution via SocketIO interface...

CVE-2026-25254

CVE-2026-25254 is a critical (CVSS 9.8) improper authorization vulnerability in Qualcomm Software Center (QSC family) , where deficiencies in the authentication process via the SocketIO interface allow a remote, unauthenticated attacker to achieve Remote Code Execution with high impact on confide...

CVE-2026-25254 Improper authorization in Qualcomm Software Center

Improper authorization leads to Remote Code Execution via SocketIO interface...

EUVD-2026-84333

The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 6.8.0 via the wtegettemplate function. This makes it possible for authenticated attackers, with contributor-level access and above, ...

CVE-2026-9231: Improper Control of Filename for Include/Require Statement in PHP Program

The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 6.8.0 via the wtegettemplate function. This makes it possible for authenticated attackers, with contributor-level access and above, ...

In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within a command line

In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within a command line. This requires a scenario where the username on the command line is untrusted, and also requires a non-default configuration of % in sshconfig...

gpasskey

======== gpasskey .. image:: https://gitlab.com/renich/gpasskey/-/raw/master/assets/banner.svg :width: 100% :align: center :alt: gpasskey banner | .. image:: https://gitlab.com/renich/gpasskey/badges/master/pipeline.svg :target: https://gitlab.com/renich/gpasskey/-/commits/master :alt: pipeline...

ROS-20260921-73-0118

The vulnerability of AMD’s microprogrammed software lies in the improper isolation of common resources between trusted and untrusted agents. Exploiting this vulnerability can allow attackers to increase their privileges...