EUVD-2024-37503

Malicious code in bioql PyPI...

EUVD-2022-38654

Malicious code in bioql PyPI...

EUVD-2023-26155

Malicious code in bioql PyPI...

EUVD-2022-32652

Malicious code in bioql PyPI...

EUVD-2022-28373

Malicious code in bioql PyPI...

EUVD-2021-30163

Malicious code in bioql PyPI...

EUVD-2022-15365

Malicious code in bioql PyPI...

PT-2025-39453

Name of the Vulnerable Software and Affected Versions Flock Safety Bravo Edge AI Compute Device version BRAVO 00.00 local 20241017 Description The Flock Safety Bravo Edge AI Compute Device allows attackers with physical access to flash arbitrary firmware, dump partitions, and bypass bootloader an...

CVE-2023-53384

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: avoid possible NULL skb pointer dereference In 'mwifiexhandleuaprxforward', always check the value returned by 'skbcopy' to avoid potential NULL pointer dereference in 'mwifiexuapqueuebridgedpkt', and drop original...

Apple macOS Tahoe sandbox under-limit vulnerability (CNVD-2025-22593)

Apple macOS Tahoe is the 26th major release of Apple's macOS operating system, which was released on June 10, 2025, and features a new "Liquid Glass" visual design that significantly optimizes interface aesthetics, feature integration, and cross-device collaboration. The 26th major version of the...

CVE-2025-43204

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26. An app may be able to break out of its sandbox...

SK Hynix DDR5 安全漏洞

SK Hynix DDR5 is a double data rate synchronous dynamic random access memory from SK Hynix South Korea. A security vulnerability exists in SK Hynix DDR5 versions 2021-1 through 2024-12, which originates from a local attacker who can trigger a Rowhammer bit flip, potentially impacting hardware...

Your AI Strategy Is Only as Strong as Your DNS

...

rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy

...

QNAP VioStor 授权问题漏洞

QNAP VioStor is a software for storing and managing video surveillance systems from Taiwan, China-based QNAP Technology QNAP. An authorization issue vulnerability exists in QNAP VioStor that stems from improper authentication and could compromise system security...

Siemens RUGGEDCOM ROX II

SUMMARY RUGGEDCOM ROX II devices do not properly limit access through their Built-In-Self-Test BIST mode. This could allow a local attacker to bypass authentication and access a root shell on the device. Siemens is preparing fix versions and recommends specific countermeasures for products where...

Linux Distros Unpatched Vulnerability : CVE-2025-37936

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: KVM: Mask PEBSENABLE loaded for guest with vCPU's value. When generating the...

Privileged OpenBao Operator May Execute Code on the Underlying Host

Impact Under certain threat models, OpenBao operators with privileged API access may not be system administrators and thus normally lack the ability to update binaries or execute code on the system. Additionally, privileged API operators should be unable to perform TCP connections to arbitrary...

Linux Distros Unpatched Vulnerability : CVE-2017-7518

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the Linux kernel before version 4.12 in the way the KVM module processed the trap flagTF bit in EFLAGS during emulation of the syscall...

Arbitrary File Write

assemblyline-service-client is vulnerable to Arbitrary File Write. The vulnerability is due to insufficient validation of file paths, allowing attackers to write files outside the intended directory...