EUVD-2023-57720

Malicious code in bioql PyPI...

EUVD-2023-2752

Malicious code in bioql PyPI...

EUVD-2022-40497

Malicious code in bioql PyPI...

EUVD-2023-1978

Malicious code in bioql PyPI...

EUVD-2023-23561

Malicious code in bioql PyPI...

EUVD-2025-30187

Malicious code in bioql PyPI...

EUVD-2022-28625

Malicious code in bioql PyPI...

EUVD-2025-26398

Malicious code in bioql PyPI...

EUVD-2022-28633

Malicious code in bioql PyPI...

EUVD-2022-28632

Malicious code in bioql PyPI...

EUVD-2022-28624

Malicious code in bioql PyPI...

EUVD-2022-40486

Malicious code in bioql PyPI...

EUVD-2022-40493

Malicious code in bioql PyPI...

This Week in Spring: September 30th, 2025

Hi, Spring fans! As I write this I am about to board a flight for Colorado for the amazing Dev2Next conference! I'll be in Antwerp, Beglium for the amazing Devoxx event next week, and I'll be speaking at the Amsterdam JUG with James Ward on the Thursday after that, too! If you're around, be sure ...

PT-2025-39691

Name of the Vulnerable Software and Affected Versions Tencent WeKnora version 0.1.0 Description A security flaw exists in Tencent WeKnora version 0.1.0. The testEmbeddingModel function within the /api/v1/initialization/embedding/test file is susceptible to server-side request forgery. Manipulatio...

Security update for curl

This update for curl fixes the following issues: CVE-2025-9086: Fixed Out of bounds read for cookie path bsc1249191 CVE-2025-10148: Predictable WebSocket mask bsc1249348 Fix the --ftp-pasv option in curl v8.14.1 bsc1246197 tooloperate: fix return code when --retry is used but not triggered...

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling due to improper parsing of the HTTP trailer section in the parse function. An attacker can bypass security controls, launch targeted attacks against users, or poison web caches by crafting specially formed HTTP...

openSUSE 15 Security Update : mybatis, ognl (SUSE-SU-2025:03285-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:03285-1 advisory. Version update to 3.5.7: Bug fixes: - Improved performance under JDK 8. 2223 Version update to 3.5.8: List of changes: - Avoid NullPointerException when...

CVE-2025-54860

Cognex In-Sight Explorer and In-Sight Camera Firmware expose a telnet-based service on port 23 in order to allow management operations on the device such as firmware upgrades and device reboot requiring an authentication. A wrong management of login failures of the service allows a...

CVE-2025-54497

Cognex In-Sight Explorer and In-Sight Camera Firmware expose a telnet-based service on port 23 to allow management operations such as firmware upgrades and device reboots, which require authentication. A user with protected privileges can successfully invoke the SetSerialPort functionality to...