Tencent HunyuanDiT code issue and vulnerabilities

Tencent HunyuanDiT is a diffusion model from Tencent China. A code issue vulnerability exists in Tencent HunyuanDiT that stems from a lack of validation of user-supplied data in the modelresume function, which could lead to deserialization of untrusted data and remote code execution...

Hugging Face Accelerate code issue vulnerabilities

Hugging Face Accelerate is a lightweight tool library for Python open sourced by Hugging Face. A code issue vulnerability exists in Hugging Face Accelerate that stems from a lack of validation of user-supplied data when parsing checkpoints, which could lead to deserialization of untrusted data an...

Tencent Hunyuan3D-1 code issues and vulnerabilities

Tencent Hunyuan3D-1 is an industrial-grade 3D generated large model from Tencent, a Chinese company. A code issue vulnerability exists in Tencent Hunyuan3D-1, which stems from a lack of validation of user-supplied data in the loadpretrained function, which could lead to deserialization of untrust...

Tencent FaceDetection-DSFD code-related vulnerabilities

Tencent FaceDetection-DSFD is a face detection algorithm from Tencent, a Chinese company. Tencent FaceDetection-DSFD suffers from a code issue vulnerability that stems from a lack of validation of user-supplied data at resnet endpoints, which could lead to deserialization of untrusted data and...

Tencent TFace code-related vulnerabilities

Tencent TFace is a deep learning research platform focusing on face recognition from China's Tencent Tencent. Tencent TFace suffers from a code issue vulnerability that stems from a lack of validation of user-supplied data in eval endpoints, which could lead to deserialization of untrustworthy da...

CVE-2025-9558 Bluetooth: Mesh: Out-of-Bound Write in gen_prov_start

There is a potential OOB Write vulnerability in the genprovstart function in pbadv.c. The full length of the received data is copied into the link.rx.buf receiver buffer without any validation on the data size...

Apple macOS WindowServer Excessive Iteration Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Apple macOS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the WindowServer component. The issue results from the lack of proper validati...

EUVD-2021-20985

Malware in sbrugna...

EUVD-2020-0312

Malware in sbrugna...

CVE-2025-58582

If a user tries to login but the provided credentials are incorrect a log is created. The data for this POST requests is not validated and it’s possible to send giant payloads which are then logged...

CVE-2025-58582 Uncontrolled Resource Consumption via log file

If a user tries to login but the provided credentials are incorrect a log is created. The data for this POST requests is not validated and it’s possible to send giant payloads which are then logged...

EUVD-2025-32497

If a user tries to login but the provided credentials are incorrect a log is created. The data for this POST requests is not validated and it’s possible to send giant payloads which are then logged...

CVE-2025-58582

CVE-2025-58582 affects SICK Enterprise Analytics and SICK Logistic Analytics. The issue stems from logging POST login data without validation, allowing unusually large payloads to be recorded. This can lead to uncontrolled resource consumption and potential impact on availability, as indicated by...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an unvalidated dataoffset and datalength fields of the smbdirectdatatransfer structure, which could lead to...

EUVD-2025-8129

Malicious code in bioql PyPI...

EUVD-2022-29988

Malicious code in bioql PyPI...

EUVD-2025-17646

Malicious code in bioql PyPI...

EUVD-2025-27495

Malicious code in bioql PyPI...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from unvalidated dataoffset, datalength, and maintainingdatalength, which could lead to insufficient data validation...

Ashlar-Vellum Cobalt Type Obfuscation Vulnerability (NVD-C-2025-543225)

Ashlar-Vellum Cobalt is a 3D modeling software developed by Ashlar Vellum, which supports Windows and Mac systems, and is mainly used for 3D modeling and CAD drawing in industrial product design, architectural design and other fields. Ashlar-Vellum Cobalt suffers from a type confusion vulnerabili...