21034 matches found
EUVD-2023-1909
Malicious code in bioql PyPI...
EUVD-2023-51741
Malicious code in bioql PyPI...
EUVD-2023-1007
Malicious code in bioql PyPI...
EUVD-2025-18583
Malicious code in bioql PyPI...
EUVD-2022-38616
Malicious code in bioql PyPI...
EUVD-2024-36474
Malicious code in bioql PyPI...
EUVD-2022-39111
Malicious code in bioql PyPI...
EUVD-2024-35888
Malicious code in bioql PyPI...
EUVD-2024-20843
Malicious code in bioql PyPI...
EUVD-2025-29539
Malicious code in bioql PyPI...
EUVD-2022-7524
Malicious code in bioql PyPI...
EUVD-2023-32010
Malicious code in bioql PyPI...
RLSA-2025:9146 Moderate: podman security update
The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fixes: net/http: Request smuggling due to acceptance of invalid chunked data in net/http...
RLSA-2025:9149 Moderate: skopeo security update
The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fixes: net/http: Request smuggling due to acceptance of invalid chunked data in net/http CVE-2025-22871 For more details about the...
Claude Code 安全漏洞
Claude Code is an open source proxy coding tool from Anthropic. A security vulnerability exists in Claude Code versions prior to 1.0.120 that stems from a failure to consider symbolic links when checking permission denial rules, which could lead to bypassing file access restrictions...
Server-side Request Forgery (SSRF)
Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF. An attacker can access internal resources, exfiltrate sensitive information, or perform unauthorized actions by sending crafted requests to internal or protected endpoints. Note: This is only exploitabl...
Files or Directories Accessible to External Parties
Overview Affected versions of this package are vulnerable to Files or Directories Accessible to External Parties due to improper restriction of file read. An attacker can obtain sensitive information by sending crafted requests to exposed resources. Note: This is only exploitable if the attacker...
How to Close Threat Detection Gaps: Your SOC's Action Plan
Running a SOC often feels like drowning in alerts. Every morning, dashboards light up with thousands of signals; some urgent, many irrelevant. The job is to find the real threats fast enough to keep cases from piling up, prevent analyst burnout, and maintain client or leadership confidence. The...
