EUVD-2022-32137

Malicious code in bioql PyPI...

EUVD-2022-48739

Malicious code in bioql PyPI...

EUVD-2023-35776

Malicious code in bioql PyPI...

EUVD-2022-35527

Malicious code in bioql PyPI...

EUVD-2023-29149

Malicious code in bioql PyPI...

EUVD-2022-40931

Malicious code in bioql PyPI...

EUVD-2025-5301

Malicious code in bioql PyPI...

EUVD-2024-0773

Malicious code in bioql PyPI...

EUVD-2023-26445

Malicious code in bioql PyPI...

Vulnerabilities affecting Endress+Hauser SSG-E210GC

Several vulnerabilities in the Endress+Hauser SSG-E210GC product were discoverd. The advisory includes a total of 23 vulnerabilities, of which 14 are confirmed as affected and 9 as known not affected...

Noodlophile Malware Campaign Expands Global Reach with Copyright Phishing Lures

The threat actors behind the Noodlophile malware are leveraging spear-phishing emails and updated delivery mechanisms to deploy the information stealer in attacks aimed at enterprises located in the U.S., Europe, Baltic countries, and the Asia-Pacific APAC region. "The Noodlophile campaign, activ...

AI wrote my code and all I got was this broken prototype

Welcome to this week's edition of the Threat Source newsletter. Vulnerabilities within software are a persistent challenge. Software engineers inadvertently tend to make the same mistakes repeatedly, with the same entries appearing in the annual top 25 list of Common Weakness Enumerations each...

MINI-684M-C957-3HPH

Bulletin has no description...

MAL-2025-6797 Malicious code in criteo-video-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a71052dd6a243d5cbf33f701f287777125ed237e9d9b2e750874fea97a0d7618 The OpenSSF Package Analysis project identified 'criteo-video-player' @ 1.0.0 npm as malicious. It is considered malicious because: - The packag...

RHSA-2025:13061 Red Hat Security Advisory: kernel security update

Bulletin has no description...

Advisory ROSA-SA-2025-2941

software: freetype 2.10.4 OS: ROSA-CHROME unaffected versions = freetype-2.10.4-8 affected versions freetype-2.10.4-8 CVE-ID: CVE-2025-27363 BDU-ID: 2025-02719 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the FreeType font rasterization library involves reading outside buffer boundaries in memory...

SUSE: Security Advisory (SUSE-SU-2025:02680-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHSA-2025:12834 Red Hat Security Advisory: python3.12-setuptools security update

Bulletin has no description...

BELL-CVE-2025-54410

Bulletin has no description...

PT-2025-32005 · Risc Zero · Risc0-Zkvm +2

Name of the Vulnerable Software and Affected Versions: risc0-zkvm versions 2.0.0 through 2.1.0 risc0-circuit-rv32im versions 2.0.0 through 2.0.4 risc0-circuit-rv32im-sys versions 2.0.0 through 2.0.4 Description: RISC Zero is a zero-knowledge verifiable general computing platform based on zk-STARK...