EUVD-2025-23412

Malicious code in bioql PyPI...

EUVD-2023-26163

Malicious code in bioql PyPI...

EUVD-2025-2550

Malicious code in bioql PyPI...

EUVD-2025-2546

Malicious code in bioql PyPI...

EUVD-2025-6420

Malicious code in bioql PyPI...

EUVD-2025-7401

Malicious code in bioql PyPI...

EUVD-2023-26259

Malicious code in bioql PyPI...

EUVD-2022-26494

Malicious code in bioql PyPI...

EUVD-2025-4604

Malicious code in bioql PyPI...

CVE-2025-49641: Incorrect Authorization

A regular Zabbix user with no permission to the Monitoring - Problems view is still able to call the problem.view.refresh action and therefore still retrieve a list of active problems...

FreeBSD : py-mysql-connector-python -- Vulnerability in the MySQL Connectors product of Oracle MySQL (cb570d6f-9ea9-11f0-9446-f02f7497ecda)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the cb570d6f-9ea9-11f0-9446-f02f7497ecda advisory. Oracle reports: Vulnerability in the MySQL Connectors product of Oracle MySQL component:...

CVE-2025-36262

IBM Planning Analytics Local 2.0.0 through 2.0.106 and 2.1.0 through 2.1.13 could allow a malicious privileged user to bypass the UI to gain unauthorized access to sensitive information due to the improper validation of input...

Tenable Patch Management Server < 9.3.969.1 (TNS-2025-19)

The version of Tenable Patch Management Server installed on the remote host is prior to 9.3.969.1. It is, therefore, affected by a vulnerability as referenced in the TNS-2025-19 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of...

Hostel Management System ID Parameter SQL Injection Vulnerability

Hostel Management System is a hostel management system. Hostel Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in parameter ID in file /justines/admin/modreservation/index.php?view=view. An attacker can...

Security update for mariadb

This update for mariadb fixes the following issues: Update to version 10.6.23. Security issues fixed: CVE-2025-21490: InnoDB issue allows high privileged attacker with network access to cause a hang or frequently repeatable crash of MySQL Server bsc1243356. CVE-2025-30693: InnoDB issue allows hig...

Access Control Bypass

Overview @executeautomation/database-server is a MCP server for interacting with SQLite and SQL Server databases by ExecuteAutomation Affected versions of this package are vulnerable to Access Control Bypass in the readquery tool. An attacker can gain unauthorized access to sensitive data and...

Vulnerabilities fixed in Apple iOS and iPadOS

Apple has fixed vulnerabilities in iOS and iPadOS. The vulnerabilities include several problems such as unauthorized access to sensitive user data, memory management issues, and vulnerabilities that could lead to denial-of-service or unexpected application crashes. These vulnerabilities could be...

CVE-2025-26710

The CVE-2025-26710 entry concerns a ZTE T5400 device where an improper access control configuration leads to information disclosure via interfaces without authorization. The available data confirms the affected product is the ZTE T5400 and the underlying cause is access control misconfiguration. ...

PT-2025-37915

Name of the Vulnerable Software and Affected Versions: ZTE T5400 affected versions not specified Description: An information disclosure issue exists due to an improper configuration of the access control mechanism. This allows attackers to obtain information through interfaces without...

CVE-2025-43314: Improper Limitation of a Pathname to a Restricted Directory

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access sensitive user data...