EUVD-2025-31616

Malicious code in bioql PyPI...

EUVD-2025-31617

Malicious code in bioql PyPI...

CVE-2025-56381

creationtimestamp| type| source ---|---|--- 2025-10-02 03:00:07+00:00| published-proof-of-concept| Telegram/X9bYNBM3p9rsNnfVFMIH8kiEsUjeBzQFUA21bdwo2tT-5w 2025-10-04 21:02:25+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m2fi6hmucr2p...

CVE-2025-56379

creationtimestamp| type| source ---|---|--- 2025-10-01 18:51:28+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/53811 2025-10-02 03:00:07+00:00| published-proof-of-concept| Telegram/X9bYNBM3p9rsNnfVFMIH8kiEsUjeBzQFUA21bdwo2tT-5w 2025-10-04 21:02:23+00:00| seen|...

CVE-2025-9075

creationtimestamp| type| source ---|---|--- 2025-10-01 04:00:33+00:00| seen| Telegram/Ayb8r-SeiMhSX18aUSnNsdJJfSi6H4DvgpmWebONSgKGw0k...

CVE-2025-35032

Medical Informatics Engineering Enterprise Health allows authenticated users to upload arbitrary files. The impact of this behavior depends on how files are accessed. This issue is fixed as of 2025-04-08...

CVE-2025-57529

creationtimestamp| type| source ---|---|--- 2025-09-30 02:57:56+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/53602 2025-10-18 09:50:45+00:00| seen| https://t.me/NinjaSec/424 2026-02-04 16:57:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me2duahplb2r...

CVE-2025-35032

Medical Informatics Engineering Enterprise Health allows authenticated users to upload arbitrary files. The impact of this behavior depends on how files are accessed. This issue is fixed as of 2025-04-08...

CVE-2025-35030

Medical Informatics Engineering Enterprise Health has a cross site request forgery vulnerability that allows an unauthenticated attacker to trick administrative users into clicking a crafted URL and perform actions on behalf of that administrative user. This issue is fixed as of 2025-04-08...

CVE-2025-35032 Medical Informatics Engineering Enterprise Health arbitrary file upload

Medical Informatics Engineering Enterprise Health allows authenticated users to upload arbitrary files. The impact of this behavior depends on how files are accessed. This issue is fixed as of 2025-04-08...

CVE-2025-35031 Medical Informatics Engineering Enterprise Health includes session token in debug output

Medical Informatics Engineering Enterprise Health includes the user's current session token in debug output. An attacker could convince a user to send this output to the attacker, thus allowing the attacker to impersonate that user. This issue is fixed as of 2025-04-08...

PT-2025-39873

Name of the Vulnerable Software and Affected Versions Medical Informatics Engineering Enterprise Health versions prior to 2025-04-08 Description Authenticated users are able to upload arbitrary files. The impact of this behavior is dependent on how these files are accessed. Approximately 2000...

PT-2025-39871

Name of the Vulnerable Software and Affected Versions Medical Informatics Engineering Enterprise Health affected versions not specified Description The software contains a cross site request forgery condition. An unauthenticated attacker can deceive administrative users into clicking a specially...

CVE-2025-11045

A vulnerability was identified in WAYOS LQ04, LQ05, LQ06, LQ07 and LQ09 22.03.17. This affects an unknown function of the file /usbpaswd.asp. The manipulation of the argument Name leads to command injection. The attack can be initiated remotely. The exploit is publicly available and might be used...

CVE-2025-52906

creationtimestamp| type| source ---|---|--- 2025-09-24 18:04:01+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115260590645003856 2025-10-01 12:33:49+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3m252ecl3qb2b 2025-10-02 08:09:07+00:00| seen|...

CVE-2025-55885

SQL Injection vulnerability in Alpes Recherche et Developpement ARD GEC en Lign before v.2025-04-23 allows a remote attacker to escalate privileges via the GET parameters in index.php...

PT-2025-38756

Name of the Vulnerable Software and Affected Versions Alpes Recherche et Developpement ARD GEC en Lign versions prior to 2025-04-23 Description A SQL Injection issue exists in Alpes Recherche et Developpement ARD GEC en Lign. A remote attacker can potentially escalate privileges by manipulating t...

CVE-2025-59341

creationtimestamp| type| source ---|---|--- 2025-09-17 04:25:08+00:00| published-proof-of-concept| https://github.com/esm-dev/esm.sh/security/advisories/GHSA-49pv-gwxp-532r 2026-04-22 21:02:33+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mk4fgt5k7k2h...

CVE-2021-47677

creationtimestamp| type| source ---|---|--- 2025-09-16 17:04:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyxsivtp2l2o...

CVE-2025-56019

creationtimestamp| type| source ---|---|--- 2025-09-13 06:15:38+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/51387 2025-10-04 21:02:23+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m2fi6hf3yz2p...