EUVD-2001-0561

Malware in sbrugna...

EUVD-2019-18559

Malware in sbrugna...

EUVD-2019-0362

Malware in sbrugna...

EUVD-2024-35428

Malicious code in bioql PyPI...

EUVD-2024-34496

Malicious code in bioql PyPI...

EUVD-2023-54636

Malicious code in bioql PyPI...

EUVD-2025-24038

Malicious code in bioql PyPI...

EUVD-2023-27960

Malicious code in bioql PyPI...

EUVD-2024-42373

Malicious code in bioql PyPI...

EUVD-2022-48267

Malicious code in bioql PyPI...

EUVD-2025-10608

Malicious code in bioql PyPI...

EUVD-2025-24037

Malicious code in bioql PyPI...

EUVD-2025-24036

Malicious code in bioql PyPI...

EUVD-2024-37503

Malicious code in bioql PyPI...

CVE-2025-59932

Flag Forge is a Capture The Flag CTF platform. From versions 2.0.0 to before 2.3.1, the /api/resources endpoint previously allowed POST and DELETE requests without proper authentication or authorization. This could have enabled unauthorized users to create, modify, or delete resources on the...

Security Bulletin: Axios exposes confidential XSRF-TOKEN in all requests via X-XSRF-TOKEN header

Summary An issue discovered in Axios 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-XSRF-TOKEN for every request made to any host allowing attackers to view sensitive information. Vulnerability Details CVEID:CVE-2023-45857 DESCRIPTIO...

CVE-2025-59843

Flag Forge is a Capture The Flag CTF platform. From versions 2.0.0 to before 2.3.2, the public endpoint /api/user/username returns user email addresses in its JSON response. The fix, intended for release in 2.3.1 but only available starting in version 2.3.2, removes email addresses from public AP...

CVE-2025-36274

IBM Aspera HTTP Gateway 2.0.0 through 2.3.1 stores sensitive information in clear text in easily obtainable files which can be read by an unauthenticated user...

CVE-2025-59932

Flag Forge is a Capture The Flag CTF platform. From versions 2.0.0 to before 2.3.1, the /api/resources endpoint previously allowed POST and DELETE requests without proper authentication or authorization. This could have enabled unauthorized users to create, modify, or delete resources on the...

CVE-2025-59932 FlagForgeCTF Unauthenticated Resource Modification/Deletion

Flag Forge is a Capture The Flag CTF platform. From versions 2.0.0 to before 2.3.1, the /api/resources endpoint previously allowed POST and DELETE requests without proper authentication or authorization. This could have enabled unauthorized users to create, modify, or delete resources on the...