EUVD-2023-24314

Malicious code in bioql PyPI...

EUVD-2021-29071

Malicious code in bioql PyPI...

EUVD-2025-30925

Malicious code in bioql PyPI...

EUVD-2022-0646

Malicious code in bioql PyPI...

EUVD-2024-3522

Malicious code in bioql PyPI...

EUVD-2022-0480

Malicious code in bioql PyPI...

EUVD-2023-2827

Malicious code in bioql PyPI...

EUVD-2025-21770

Malicious code in bioql PyPI...

EUVD-2023-33031

Malicious code in bioql PyPI...

CVE-2025-44012

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We hav...

BELL-CVE-2025-39913

Bulletin has no description...

BELL-CVE-2025-39927

Bulletin has no description...

Rockwell Automation Arena Code Execution

The vulnerability of software for discrete event simulation and automation in Rockwell Automation Arena is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Unity Runtime Parameter Injection Vulnerability

Unity Runtime is an underlying system responsible for executing logic, rendering, physics and interaction from Unity, Inc. in the United States. A parameter injection vulnerability exists in versions of Unity Runtime prior to 2025-10-02, which stems from a parameter injection that could lead to t...

BELL-CVE-2023-53514

Bulletin has no description...

BELL-CVE-2023-53513

Bulletin has no description...

DEBIAN-CVE-2022-50438

In the Linux kernel, the following vulnerability has been resolved: net: hinic: fix memory leak when reading function table When the input parameter idx meets the expected case option in hinicdbggetfunctable, readdata is not released. Fix it...

CVE-2025-56571

Finance.js v4.1.0 contains a Denial of Service DoS vulnerability via the IRR function’s depth parameter. Improper handling of the recursion/iteration limit can lead to excessive CPU usage, causing application stalls or crashes...

From Trace to Line: LLM Agent for Real-World OSS Vulnerability Localization

Large language models show promise for vulnerability discovery, yet prevailing methods inspect code in isolation, struggle with long contexts, and focus on coarse function- or file-level detections - offering limited actionable guidance to engineers who need precise line-level localization and...

Security Bulletin:IBM Event Streams is vulnerable to Regular Expression Denial of Service (ReDoS) ( CVE-2025-1302).

Summary IBM Event Streams is vulnerable to Regular Expression Denial of Service ReDoS caused by Inefficient Regular Expression Complexity. This issue affects JavaScript code that is compiled using certain versions of Babel . Babel is a JavaScript transcompiler used for converting modern JavaScrip...