EUVD-2025-25192

Malicious code in bioql PyPI...

EUVD-2021-8064

Malicious code in bioql PyPI...

EUVD-2021-8043

Malicious code in bioql PyPI...

EUVD-2024-54292

Malicious code in bioql PyPI...

EUVD-2023-42495

Malicious code in bioql PyPI...

EUVD-2025-32199

Malicious code in bioql PyPI...

EUVD-2023-50947

Malicious code in bioql PyPI...

EUVD-2023-36851

Malicious code in bioql PyPI...

EUVD-2025-2206

Malicious code in bioql PyPI...

EUVD-2025-32273

The Mobile Site Redirect plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.1. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious w...

CVE-2025-32942: Always-Incorrect Control Flow Implementation

SSH Tectia Server before 6.6.6 sometimes allows attackers to read and alter a user's session traffic...

CVE-2025-32942

SSH Tectia Server before 6.6.6 sometimes allows attackers to read and alter a user's session traffic...

CVE-2025-57432

Blackmagic Web Presenter version 3.3 is vulnerable to an unauthenticated command execution flaw due to a Telnet service exposed on port 9977. Because the service lacks authentication mechanisms, remote attackers can manipulate stream settings, change video modes, and potentially alter device func...

PT-2025-36731

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: An open database issue exists due to an over permissive Redis instance. This could result in an attacker on the intranet accessing sensitive data and...

CVE-2025-41031

Lack of authorisation in Deporsite by T-INNOVA. This vulnerability allows an unauthenticated attacker to change other users' profile pictures via a POST request using the parameters ‘IdPersona’ and “Foto” in ‘/ajax/TInnovac/FotoUsuario/llamadaAjax/uploadImage’...

CVE-2025-41031

CVE-2025-41031 affects Deporsite by T-INNOVA. The root cause is a lack of authorization that allows an unauthenticated attacker to change other users’ profile pictures by sending a POST request to /ajax/TInnova_c/FotoUsuario/llamadaAjax/uploadImage with IdPersona and Foto. The CVE entry lists a C...

PT-2025-35584

Name of the Vulnerable Software and Affected Versions: SunPower PVS6 affected versions not specified Description: The SunPower PVS6’s BluetoothLE interface is vulnerable due to the use of hardcoded encryption parameters and publicly accessible protocol details. An attacker within Bluetooth range...

CVE-2025-53105

GLPI, which stands for Gestionnaire Libre de Parc Informatique, is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In versions 10.0.0 to before 10.0.19, a connected user without administration rights can change th...

CVE-2025-55629

Insecure permissions in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.46622503122283 allow attackers to arbitrarily change other users' passwords via manipulation of the userName value...

Linux Distros Unpatched Vulnerability : CVE-2024-1488

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime...