EUVD-2024-46388

Malicious code in bioql PyPI...

EUVD-2023-46178

Malicious code in bioql PyPI...

EUVD-2025-11731

Malicious code in bioql PyPI...

EUVD-2025-31270

Malicious code in bioql PyPI...

EUVD-2024-51550

Malicious code in bioql PyPI...

EUVD-2022-25082

Malicious code in bioql PyPI...

EUVD-2024-46386

Malicious code in bioql PyPI...

EUVD-2024-43723

Malicious code in bioql PyPI...

EUVD-2022-15436

Malicious code in bioql PyPI...

EUVD-2024-23217

Malicious code in bioql PyPI...

EUVD-2025-9220

Malicious code in bioql PyPI...

EUVD-2024-52911

Malicious code in bioql PyPI...

EUVD-2022-0684

Malicious code in bioql PyPI...

EUVD-2024-29915

Malicious code in bioql PyPI...

CVE-2025-10991

The attacker may obtain root access by connecting to the UART port and this vulnerability requires the attacker to have the physical access to the device. This issue affects Tapo D230S1 V1.20: before 1.2.2 Build 20250907...

CVE-2025-10991

The attacker may obtain root access by connecting to the UART port and this vulnerability requires the attacker to have the physical access to the device. This issue affects Tapo D230S1 V1.20: before 1.2.2 Build 20250907...

CVE-2025-10991

CVE-2025-10991 affects TP-Link TP-Link Tapo D230S1 (V1.20) prior to 1.2.2 Build 20250907. The issue enables a local attacker to obtain root access by connecting to the UART port, requiring physical access to the device. Impact is described as total on technical metrics, with high confidentiality,...

CVE-2025-10991 Root Access via UART

The attacker may obtain root access by connecting to the UART port and this vulnerability requires the attacker to have the physical access to the device. This issue affects Tapo D230S1 V1.20: before 1.2.2 Build 20250907...

CVE-2025-10954

Versions of the package github.com/nyaruka/phonenumbers before 1.2.2 are vulnerable to Improper Validation of Syntactic Correctness of Input in the phonenumbers.Parse function. An attacker can cause a panic by providing crafted input causing a "runtime error: slice bounds out of range". Mitigatio...

WordPress User Avatar - Reloaded plugin <= 1.2.2 - Cross Site Scripting (XSS) vulnerability

WordPress User Avatar - Reloaded plugin = 1.2.2 - Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin User Avatar - Reloaded versions = 1.2.2...