CVE-2024-41345

openflights commit 5234b5b is vulnerable to Cross-Site Scripting XSS via php/trip.php...

Faking Receipts with AI

Over the past few decades, it's become easier and easier to create fake receipts. Decades ago, it required special paper and printers--I remember a company in the UK advertising its services to people trying to cover up their affairs. Then, receipts became computerized, and faking them required...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988957)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988957 advisory. In the Linux kernel, the following vulnerability has been resolved: thermal: core: Fix TZGETTRIP NULL pointer dereference Do not call gettriphyst from...

EUVD-2017-17965

Malware in sbrugna...

EUVD-2020-27451

Malware in sbrugna...

EUVD-2017-17966

Malware in sbrugna...

EUVD-2014-0408

Malware in sbrugna...

EUVD-2015-0411

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987145)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987145 advisory. In the Linux kernel, the following vulnerability has been resolved: thermal: core: Fix TZGETTRIP NULL pointer dereference Do not call gettriphyst from...

EUVD-2023-32521

Malicious code in bioql PyPI...

EUVD-2024-30518

Malicious code in bioql PyPI...

EUVD-2024-44898

Malicious code in bioql PyPI...

QUIC in HAProxy 3.1.x before 3.1-dev7, 3.0.x before 3.0.5, and 2.9.x before 2.9.11 allows opening a 0-RTT session with a spoofed IP address. This can bypass the IP allow/block list functionality.

...

Linux Distros Unpatched Vulnerability : CVE-2019-18805

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in net/ipv4/sysctlnetipv4.c in the Linux kernel before 5.0.11. There is a net/ipv4/tcpinput.c signed integer overflow in tcpackupdatertt...

Malicious code in dyna-travel-ui-select-air-trip (npm)

The package dyna-travel-ui-select-air-trip was found to contain malicious code...

Malicious code in trip-to-mars (npm)

The package trip-to-mars was found to contain malicious code...

MAL-2025-37212 Malicious code in trip-to-mars (npm)

The package trip-to-mars was found to contain malicious code...

MAL-2025-19028 Malicious code in dyna-travel-ui-select-air-trip (npm)

The package dyna-travel-ui-select-air-trip was found to contain malicious code...

Bykea: Customer can cancel a individual booking in a batch, causing locking of partner.

The vulnerability allowed users to update the status of individual trips inside a batch, even though only batch-level status changes were intended. By cancelling the single trip inside a one-parcel batch, the batch was placed into an inconsistent state, causing the assigned partner to become stuc...

Linux Distros Unpatched Vulnerability : CVE-2024-27006

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: thermal/debugfs: Add missing count increment to thermaldebugtztripup The count field in stru...