EUVD-2019-7493

Malware in sbrugna...

DEBIAN-CVE-2025-59734

It is possible to cause an use-after-free write in SANM decoding with a carefully crafted animation using subversion storedframe. Stored frames can later be referenced by FTCH chunks. For files using subversion storedframe. Leaving ctx-hasdimensions set to false. A subsequent chunk with type...

UTT 1250GW 安全漏洞

The UTT 1250GW is a wireless router from China Aitai UTT. A security vulnerability exists in UTT 1250GW v2v3.2.2-200710 and earlier versions, which stems from an incorrect manipulation of the parameter Username in the file /goform/formUserStatusRemark, which could result in a buffer overflow...

EUVD-2025-28244

Malicious code in bioql PyPI...

EUVD-2024-54662

Malicious code in bioql PyPI...

EUVD-2025-29560

Malicious code in bioql PyPI...

EUVD-2025-29555

Malicious code in bioql PyPI...

EUVD-2023-32324

Malicious code in bioql PyPI...

EUVD-2023-50050

Malicious code in bioql PyPI...

EUVD-2025-1819

Malicious code in bioql PyPI...

EUVD-2024-25120

Malicious code in bioql PyPI...

EUVD-2022-49954

Malicious code in bioql PyPI...

EUVD-2025-3952

Malicious code in bioql PyPI...

EUVD-2024-44949

Malicious code in bioql PyPI...

EUVD-2025-28480

Malicious code in bioql PyPI...

CVE-2024-1930 affecting package dnf5 for versions less than 5.0.14-3

CVE-2024-1930 affecting package dnf5 for versions less than 5.0.14-3. A patched version of the package is available...

CVE-2025-5916 affecting package libarchive for versions less than 3.6.1-7

CVE-2025-5916 affecting package libarchive for versions less than 3.6.1-7. A patched version of the package is available...

emlog 跨站脚本漏洞

Emlog is a PHP and MySQL based CMS builder. Emlog 2.5.21 and previous versions of cross-site scripting vulnerability, the vulnerability stems from the lack of effective filtering and escaping of user-supplied data in the email template settings, an attacker can exploit this vulnerability by...

BIT-GITLAB-2025-7691 Privilege Defined With Unsafe Actions in GitLab

A privilege escalation issue has been discovered in GitLab EE affecting all versions from 16.6 prior to 18.2.7, 18.3 prior to 18.3.3, and 18.4 prior to 18.4.1 that could have allowed a developer with specific group management permissions to escalate their privileges and obtain unauthorized access...

CVE-2025-41096 Insecure Direct Object Reference in GPS BOLD Workplanner

Insecure Direct Object Reference IDOR vulnerability in BOLD Workplanner in versions prior to 2.5.25 4935b438f9b, consisting of a lack of adequate validation of user input, allowing an authenticated user to access to the dates of the current contract details using unauthorised internal identifiers...