EUVD-2025-14939

Malicious code in bioql PyPI...

EUVD-2022-6977

Malicious code in bioql PyPI...

EUVD-2023-46308

Malicious code in bioql PyPI...

EUVD-2024-2459

Malicious code in bioql PyPI...

EUVD-2022-27864

Malicious code in bioql PyPI...

EUVD-2025-14941

Malicious code in bioql PyPI...

EUVD-2024-50584

Malicious code in bioql PyPI...

EUVD-2025-16736

Malicious code in bioql PyPI...

EUVD-2021-28270

Malicious code in bioql PyPI...

EUVD-2024-32987

Malicious code in bioql PyPI...

python3.12 security update

An update is available for python3.12. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming...

RLSA-2025:10140 Important: python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

CVE-2025-10306

CVE-2025-10306 – Backup Bolt (WordPress) is a vulnerability in the Backup Bolt plugin affecting all versions up to and including 1.4.1. The flaw, located in process_backup_batch(), allows authenticated attackers with Administrator-level access to download directories outside the webroot and write...

CVE-2025-10306: External Control of File Name or Path

The Backup Bolt plugin for WordPress is vulnerable to arbitrary file downloads and backup location writes in all versions up to, and including, 1.4.1 via the processbackupbatch function. This makes it possible for authenticated attackers, with Administrator-level access and above, to download...

Dell Client BIOS Improper SMM Communication Buffer Verification (DSA-2024-104)

The Dell BIOS on the remote device is missing a security patch and is, therefore, affected by an Improper SMM communication buffer verification vulnerability. A physical high privileged attacker could potentially exploit this vulnerability leading to arbitrary writes to SMRAM. Note that Nessus ha...

WordPress plugin Backup Bolt has a security vulnerability

WordPress Backup Bolt plugin is a backup plugin for WordPress websites, mainly used to automate the backup of website data including files, databases, etc., and support the recovery function. WordPress Backup Bolt plugin has an arbitrary file download vulnerability, which stems from a flaw in the...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal in the validLogFileName and validExecOutputFileName functions, which insufficiently validate log file names, allowing traversal sequences after certain prefixes. An attacker can access sensitive files on the host...

CVE-2025-39905

In the Linux kernel, the following vulnerability has been resolved: net: phylink: add lock for serializing concurrent pl-phydev writes with resolver Currently phylinkresolve protects itself against concurrent phylinkbringupphy or phylinkdisconnectphy calls which modify pl-phydev by relying on...

net: phylink: add lock for serializing concurrent pl->phydev writes with resolver

...

SUSE CVE-2025-39905

In the Linux kernel, the following vulnerability has been resolved: net: phylink: add lock for serializing concurrent pl-phydev writes with resolver Currently phylinkresolve protects itself against concurrent phylinkbringupphy or phylinkdisconnectphy calls which modify pl-phydev by relying on...