CVE-2023-53567

In the Linux kernel, the following vulnerability has been resolved: spi: qup: Don't skip cleanup in remove's error path Returning early in a platform driver's remove callback is wrong. In this case the dma resources are not released in the error path. this is never retried later and so this is a...

CVE-2022-50499

In the Linux kernel, the following vulnerability has been resolved: media: dvb-core: Fix double free in dvbregisterdevice In function dvbregisterdevice - dvbregistermediadevice - dvbcreatemediaentity, dvb-entity is allocated and initialized. If the initialization fails, it frees the dvb-entity, a...

CVE-2022-50491

In the Linux kernel, the following vulnerability has been resolved: coresight: cti: Fix hang in ctidisablehw ctienablehw and ctidisablehw are called from an atomic context so shouldn't use runtime PM because it can result in a sleep when communicating with firmware. Since commit 3c6656337852...

golang security update

An update is available for golang. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The golang packages provide the Go programming language compiler. Security...

EUVD-2025-25819

Malicious code in bioql PyPI...

EUVD-2025-27688

Malicious code in bioql PyPI...

EUVD-2025-32051

Malicious code in bioql PyPI...

EUVD-2025-24658

Malicious code in bioql PyPI...

EUVD-2025-32197

Malicious code in bioql PyPI...

EUVD-2025-24543

Malicious code in bioql PyPI...

EUVD-2025-30284

Malicious code in bioql PyPI...

EUVD-2025-28857

Malicious code in bioql PyPI...

EUVD-2025-30945

Malicious code in bioql PyPI...

PT-2025-40531

Name of the Vulnerable Software and Affected Versions TCL 65C655 Smart TV version V8-R75PT01-LF1V269.001116 Description The TCL 65C655 Smart TV is susceptible to a Server-Side Request Forgery SSRF issue. This affects the UPnP MediaRenderer service AVTransport:1, which accepts unauthenticated...

PT-2025-40613

Name of the Vulnerable Software and Affected Versions ManageEngine Analytics Plus versions 6171 and prior Description The software is susceptible to authenticated SQL Injection through the key update API. The API endpoint is vulnerable due to improper input validation, potentially allowing an...

Detour Dog’s DNS Hijacking Infects 30,000 Websites with Strela Stealer

Infoblox reveals how the Detour Dog group used server-side DNS to compromise 30,000+ sites across 89 countries, installing the stealthy Strela Stealer malware...

CVE-2022-50421

In the Linux kernel, the following vulnerability has been resolved: rpmsg: char: Avoid double destroy of default endpoint The rpmsgdevremove in rpmsgcore is the place for releasing this default endpoint. So need to avoid destroying the default endpoint in rpmsgchrdeveptdevdestroy, this should be...

CVE-2022-50450

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2022-50449

In the Linux kernel, the following vulnerability has been resolved: clk: samsung: Fix memory leak in samsungclkregisterpll If clkregister fails, @pll-ratetable may have allocated memory by kmemdup, so it needs to be freed, otherwise will cause memory leak issue, this patch fixes it...

CVE-2022-50431

In the Linux kernel, the following vulnerability has been resolved: ALSA: aoa: i2sbus: fix possible memory leak in i2sbusadddev devsetname in soundbusaddone allocates memory for name, it need be freed when ofdeviceregister fails, call soundbusdevput to give up the reference that hold in...