EUVD-2024-1473

Malicious code in bioql PyPI...

EUVD-2025-22349

Malicious code in bioql PyPI...

EUVD-2024-19108

Malicious code in bioql PyPI...

EUVD-2024-25981

Malicious code in bioql PyPI...

EUVD-2024-37777

Malicious code in bioql PyPI...

EUVD-2024-25993

Malicious code in bioql PyPI...

EUVD-2024-19044

Malicious code in bioql PyPI...

EUVD-2022-53429

Malicious code in bioql PyPI...

EUVD-2024-26095

Malicious code in bioql PyPI...

EUVD-2023-40368

Malicious code in bioql PyPI...

EUVD-2024-19045

Malicious code in bioql PyPI...

EUVD-2025-19420

Malicious code in bioql PyPI...

EUVD-2025-24650

Malicious code in bioql PyPI...

EUVD-2025-8369

Malicious code in bioql PyPI...

EUVD-2024-19150

Malicious code in bioql PyPI...

CVE-2023-28760

TP-Link AX1800 WiFi 6 Router Archer AX21 devices allow unauthenticated attackers on the LAN to execute arbitrary code as root via the dbdir field to minidlnad. The attacker obtains the ability to modify files.db, and that can be used to reach a stack-based buffer overflow in...

Malicious code in node-db-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45ff3c4bbc7432de4b939c5c4f4553b07da3f84986979516af118b1da40fb264 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-57516

OS Command injection vulnerability in PublicCMS PublicCMS-V5.202506.a, and PublicCMS-V5.202506.b allowing attackers to execute arbitrary commands via crafted DATABASE, USERNAME, or PASSWORD variables to the backupDB.bat file...

CVE-2025-34227 Nagios XI < 2026R1 Configuration Wizard Authenticated Command Injection

Nagios XI 2026R1 is vulnerable to an authenticated command injection vulnerability within the MongoDB Database, MySQL Query, MySQL Server, Postgres Server, and Postgres Query wizards. It is possible to inject shell characters into arguments provided to the service and execute arbitrary system...

Malicious code in luma-glow-db (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80813446edf951ac165d71e8e56c30d45881e40776615d07d104e3e40ef1f5ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...