Malicious code in dlxprobe12 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in dlxprobe1 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in chatoaifetch177855509941 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aiwsqjjbeqyn (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aiwsamimxhff (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aiwkctcwynld (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aiuupaosataw (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in agfosscab20 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in security_hacks (NuGet)

--- -= Per source details. Do not edit below this line.=-...

LibOSDP RMAC revert to the beginning of the session

- Issues: - SCS14 is allowed on encrypted connection osdpphy.c - No validation for RMACI is only in response to osdpSCRYPT osdpcp.c - Couldn't find anything specific in the OSDP specifications indicating it is forbidden, I'm gussing it shouldn't be allowed according from the secure connection...

PaddlePaddle command injection vulnerability

Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0...

Remote Code Execution Vulnerability in Microsoft Django Backend for SQL Server

Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability...

Privilege escalation for users that can access mock configuration

The Mock software contains a vulnerability wherein an attacker could potentially exploit privilege escalation, enabling the execution of arbitrary code with root user privileges. This weakness stems from the absence of proper sandboxing during the expansion and execution of Jinja2 templates, whic...

PYSEC-2026-1664 Exposure of Sensitive Information in mltable

Azure Machine Learning Compute Instance for SDK Users Information Disclosure Vulnerability...

pretix allows Pillow to parse EPS files

pretix before 2023.7.2 allows Pillow to parse EPS files...

PYSEC-2026-1261 Microsoft Common Data Model SDK Denial of Service Vulnerability

Microsoft Common Data Model SDK Denial of Service Vulnerability...

CVE-2026-5730

Authorization bypass through User-Controlled key vulnerability in Idvlabs Software and Consulting Services Inc. Ontime allows Exploitation of Trusted Identifiers. This issue affects Ontime: through 04052026...

CVE-2026-58385

A flaw was found in GIMP's PVR decoder. A heap-based out-of-bounds write occurs in pvrdecodecompressed because the Y-axis loop uses width / 2 instead of height / 2, allowing crafted non-square textures to write past the destination buffer. This could lead to memory corruption, potentially resulti...

Security Bulletin: Multiple vulnerabilities affect Data Virtualization on IBM Software Hub (June 2026 - Part 1 of 2)

Summary Multiple vulnerabilities have been addressed in Data Virtualization on IBM Software Hub. Note that Data Virtualization was named Watson Query on IBM Cloud Pak for Data version 4.8. Vulnerability Details CVEID:CVE-2026-50010 DESCRIPTION: Netty is a network application framework for...

CVE-2026-56044

creationtimestamp| type| source ---|---|--- 2026-07-07 07:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mq22p3vtqu2n 2026-07-07 07:25:29+00:00| seen| https://bsky.app/profile/potato.software/post/3mq237t753r2y...