EUVD-2022-38044

Malicious code in bioql PyPI...

EUVD-2024-36409

Malicious code in bioql PyPI...

SUSE CVE-2025-40779

If a DHCPv4 client sends a request with some specific options, and Kea fails to find an appropriate subnet for the client, the kea-dhcp4 process will abort with an assertion failure. This happens only if the client request is unicast directly to Kea; broadcast messages do not cause the problem...

MAL-2025-41472 Malicious code in @twork-data-services/communication-api-v4-communication-voice (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-47870

Mattermost versions 10.8.x = 10.8.3, 10.5.x = 10.5.8, 9.11.x = 9.11.17, 10.9.x = 10.9.2 fail to sanitize the team invite ID in the POST /api/v4/teams/:teamId/restore endpoint which allows an team admin with no member invite privileges to get the team’s invite id...

CVE-2025-53971

Mattermost versions 10.5.x = 10.5.8, 9.11.x = 9.11.17 fail to properly validate authorization for team scheme role modifications which allows Team Admins to demote Team Members to Guests via the PUT /api/v4/teams/team-id/members/user-id/schemeRoles API endpoint...

CVE-2025-47870: Missing Authentication for Critical Function

Mattermost versions 10.8.x = 10.8.3, 10.5.x = 10.5.8, 9.11.x = 9.11.17, 10.9.x = 10.9.2 fail to sanitize the team invite ID in the POST /api/v4/teams/:teamId/restore endpoint which allows an team admin with no member invite privileges to get the team’s invite id...

CVE-2025-53971: Incorrect Authorization

Mattermost versions 10.5.x = 10.5.8, 9.11.x = 9.11.17 fail to properly validate authorization for team scheme role modifications which allows Team Admins to demote Team Members to Guests via the PUT /api/v4/teams/team-id/members/user-id/schemeRoles API endpoint...

Malicious code in example-ethers-v4 (npm)

The package example-ethers-v4 was found to contain malicious code...

MAL-2025-10557 Malicious code in @zalastax/nolb-_v4 (npm)

The package @zalastax/nolb-v4 was found to contain malicious code...

Malicious code in @zalastax/nolb-_v4 (npm)

The package @zalastax/nolb-v4 was found to contain malicious code...

MAL-2025-20032 Malicious code in example-ethers-v4 (npm)

The package example-ethers-v4 was found to contain malicious code...

MAL-2025-17208 Malicious code in clusterpoint-api-v4 (npm)

The package clusterpoint-api-v4 was found to contain malicious code...

CVE-2025-27845: Exposure of Sensitive Information to an Unauthorized Actor

In ESPEC North America Web Controller 3 before 3.3.4, /api/v4/auth/ with any invalid authentication request results in exposing a JWT secret. This allows for elevated permissions to the UI...

CVE-2025-54799

Let's Encrypt client and ACME library written in Go Lego. In versions 4.25.1 and below, the github.com/go-acme/lego/v4/acme/api package thus the lego library and the lego cli as well don't enforce HTTPS when talking to CAs as an ACME client. Unlike the http-01 challenge which solves an ACME...

CVE-2023-41530: Improper Neutralization of Special Elements used in an SQL Command

Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the appcontact parameter in appsearch.php...

CVE-2023-41526: Improper Neutralization of Special Elements used in an SQL Command

Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func1.php via the username3 and password3 parameters...

CVE-2023-41525: Improper Neutralization of Special Elements used in an SQL Command

Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the patientcontact parameter in patientsearch.php...

CVE-2025-54799: Cleartext Transmission of Sensitive Information

Let's Encrypt client and ACME library written in Go Lego. In versions 4.25.1 and below, the github.com/go-acme/lego/v4/acme/api package thus the lego library and the lego cli as well don't enforce HTTPS when talking to CAs as an ACME client. Unlike the http-01 challenge which solves an ACME...

Linux Distros Unpatched Vulnerability : CVE-2007-6762

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel before 2.6.20, there is an off-by-one bug in net/netlabel/netlabelcipsov4.c where it is possible to overflow the doidef-tags array...