1233 matches found
EUVD-2023-43636
Malicious code in bioql PyPI...
EUVD-2023-49985
Malicious code in bioql PyPI...
EUVD-2023-42373
Malicious code in bioql PyPI...
EUVD-2021-9216
Malicious code in bioql PyPI...
EUVD-2021-33485
Malicious code in bioql PyPI...
EUVD-2021-7609
Malicious code in bioql PyPI...
EUVD-2024-1815
Malicious code in bioql PyPI...
EUVD-2024-18056
Malicious code in bioql PyPI...
EUVD-2024-45527
Malicious code in bioql PyPI...
EUVD-2023-45106
Malicious code in bioql PyPI...
EUVD-2025-14217
Malicious code in bioql PyPI...
Out-of-bounds read in HTTP client no_proxy handling
...
CVE-2025-9232
Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'noproxy' environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. Impact summary: An out-of-bounds read can trigger a crash...
CVE-2025-9232 Out-of-bounds read in HTTP client no_proxy handling
Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'noproxy' environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. Impact summary: An out-of-bounds read can trigger a crash...
PT-2025-39988
Name of the Vulnerable Software and Affected Versions OpenSSL versions 3.0.16 through 3.5.0 EDK II affected versions not specified Description An issue has been identified in OpenSSL where an application using the HTTP client API functions may trigger an out-of-bounds read if the no proxy...
OpenSSL 3.0.0 < 3.0.18 Multiple Vulnerabilities
The version of OpenSSL installed on the remote host is prior to 3.0.18. It is, therefore, affected by multiple vulnerabilities as referenced in the 3.0.18 advisory. - Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'noproxy'...
VulnCheck KEV: CVE-2025-27915
Synacor Zimbra Collaboration Suite ZCS contains a cross-site scripting vulnerability that exists in the Classic Web Client due to insufficient sanitization of HTML content in ICS files. When a user views an e-mail message containing a malicious ICS entry, its embedded JavaScript executes via an...
Axios Abuse and Salty 2FA Kits Fuel Advanced Microsoft 365 Phishing Attacks
Threat actors are abusing HTTP client tools like Axios in conjunction with Microsoft's Direct Send feature to form a "highly efficient attack pipeline" in recent phishing campaigns, according to new findings from ReliaQuest. "Axios user agent activity surged 241% from June to August 2025, dwarfin...
Lynx WWW client allows a remote attacker to specify command-line parameters which Lynx uses when calling external programs to handle certain protocols, e.g. telnet.
...
Release Information for Veeam ONE 13 Patch 1
Veeam ONE 13 Releases 13.0.2.6723 2026-05-27 What's New New Features and Improvements Suspicious Incremental Backup Size Alarm -- Extended Platform Support The Suspicious Incremental Backup Size alarm now covers all platforms supported in Veeam ONE v13, including Proxmox VE, oVirt KVM Oracle Linu...