1031 matches found
EUVD-2016-1556
Malware in sbrugna...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986652)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986652 advisory. In the Linux kernel, the following vulnerability has been resolved: s390/qeth: fix NULL deref in qethclearworkingpoollist When qethsetonline calls...
PT-2025-42616
Name of the Vulnerable Software and Affected Versions Git LFS versions 0.5.2 through 3.7.0 Description Git LFS commands, specifically git lfs checkout and git lfs pull, may write to files outside the intended Git working tree if symbolic or hard links are present that conflict with paths tracked ...
RockyLinux 10 : perl (RLSA-2025:12056)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:12056 advisory. perl: Perl threads have a working directory race condition where file operations may target unintended paths CVE-2025-40909 Tenable has extracted the preceding...
EUVD-2025-9129
Malicious code in bioql PyPI...
EUVD-2025-16506
Malicious code in bioql PyPI...
EUVD-2025-9060
Malicious code in bioql PyPI...
EUVD-2023-29934
Malicious code in bioql PyPI...
EUVD-2024-47997
Malicious code in bioql PyPI...
RLSA-2025:12056 Moderate: perl security update
Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fixes: perl: Perl threads have a working directory race condition where file operations may target unintended paths CVE-2025-40909 For more details about the security...
PT-2025-40541
Name of the Vulnerable Software and Affected Versions Cursor versions 1.7 and below Description Cursor, a code editor for programming with AI, has an issue where automatic loading of project-specific CLI configuration from the current working directory /.cursor/cli.json could override global...
Noisy Networks, Nosy Neighbors: Inferring Privacy Invasive Information from Encrypted Wireless Traffic
This thesis explores the extent to which passive observation of wireless traffic in a smart home environment can be used to infer privacy-invasive information about its inhabitants. Using a setup that mimics the capabilities of a nosy neighbor in an adjacent flat, we analyze raw 802.11 packets an...
Command Injection
Overview git-commiters is a Statistical summary of various infomation about git commiter. Affected versions of this package are vulnerable to Command Injection via the gitCommiters API which allows specifying options such as cwd for current working directory and revisionRange as a revision pointe...
Malicious code in working_tests (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49c21a63c0a80ed6817e5b19617e29f869d463d77843ef462ec7f9f177abe0aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47362 Malicious code in working_tests (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49c21a63c0a80ed6817e5b19617e29f869d463d77843ef462ec7f9f177abe0aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Huawei EulerOS: Security Advisory for perl (EulerOS-SA-2025-2051)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2025-36400
Name of the Vulnerable Software and Affected Versions: FOG versions 1.5.10.1673 and below Description: FOG is a free open-source cloning/imaging/rescue suite/inventory management system. An authentication bypass vulnerability exists, allowing an attacker to perform an unauthenticated database dum...
Malicious code in working-april-coin-master-free-spins-yrhgre (npm)
The package working-april-coin-master-free-spins-yrhgre was found to contain malicious code...