EUVD-2021-29073

Malicious code in bioql PyPI...

EUVD-2022-53153

Malicious code in bioql PyPI...

EUVD-2018-0485

Malicious code in bioql PyPI...

EUVD-2022-38157

Malicious code in bioql PyPI...

EUVD-2022-38158

Malicious code in bioql PyPI...

EUVD-2022-38154

Malicious code in bioql PyPI...

EUVD-2022-38155

Malicious code in bioql PyPI...

EUVD-2023-2361

Malicious code in bioql PyPI...

EUVD-2022-36372

Malicious code in bioql PyPI...

EUVD-2022-26103

Malicious code in bioql PyPI...

EUVD-2024-17287

Malicious code in bioql PyPI...

EUVD-2023-2145

Malicious code in bioql PyPI...

EUVD-2022-34403

Malicious code in bioql PyPI...

EUVD-2023-43939

Malicious code in bioql PyPI...

EUVD-2023-24438

Malicious code in bioql PyPI...

EUVD-2025-6938

Malicious code in bioql PyPI...

EUVD-2023-2803

Malicious code in bioql PyPI...

API Attack Awareness: Broken Object Level Authorization (BOLA) – Why It Tops the OWASP API Top 10

For this Cybersecurity Awareness Month, we thought it important to draw attention to some of the most common and dangerous API vulnerabilities. This week, we’re starting with Broken Object Level Authorization BOLA. BOLA vulnerabilities top the OWASP API Top Ten. And for good reason: they’re...

CVE-2025-59833

Flag Forge is a Capture The Flag CTF platform. In versions from 2.1.0 to before 2.3.0, the API endpoint GET /api/problems/:id returns challenge hints in plaintext within the question object, regardless of whether the user has unlocked them via point deduction. Users can view all hints for free,...

CVE-2025-10080

The CVE affects the API component of running-elephant Datart up to version 1.0.0-rc3, specifically the getTokensecret function in datart/security/src/main/java/datart/security/util/AESUtil.java, which uses a hard-coded cryptographic key. The issue is remotely exploitable with high complexity; exp...