EUVD-2024-18693

Malicious code in bioql PyPI...

EUVD-2023-58358

Malicious code in bioql PyPI...

EUVD-2022-44773

Malicious code in bioql PyPI...

EUVD-2024-33911

Malicious code in bioql PyPI...

EUVD-2024-36454

Malicious code in bioql PyPI...

EUVD-2025-7470

Malicious code in bioql PyPI...

EUVD-2025-2256

Malicious code in bioql PyPI...

EUVD-2024-34028

Malicious code in bioql PyPI...

EUVD-2024-41316

Malicious code in bioql PyPI...

EUVD-2021-33522

Malicious code in bioql PyPI...

CVE-2025-8513

A vulnerability, which was classified as problematic, was found in Caixin News App 8.0.1 on Android. Affected is an unknown function of the file AndroidManifest.xml of the component com.caixin.news. The manipulation leads to improper export of android application components. Local access is...

PT-2025-30304 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions prior to 9.11.0.0 Description: Dell PowerScale OneFS is affected by a use of a broken or risky cryptographic algorithm. A high privileged attacker with remote access could potentially exploit this, leading to...

CVE-2025-7829

CVE-2025-7829 affects Church Donation System 1.0. The vulnerability is a SQL injection in the login flow, specifically targeting the Username parameter in /login.php. The issue can be triggered remotely and exploit information has been publicly disclosed. Multiple connected sources corroborate: t...

Path Traversal

Measured is vulnerable to Path Traversal. The vulnerability is due to insufficient input validation when initializing the class, which allows an attacker to manipulate inputs and instruct the library to read arbitrary files...

PT-2025-29342 · Open5Gs · Open5Gs

Name of the Vulnerable Software and Affected Versions: Open5GS versions up to 2.7.3 Description: A problematic issue exists in Open5GS related to the SCTP Partial Message Handler component. The ngap recv handler/s1ap recv handler/recv handler function is susceptible to a reachable assertion due t...

CVE-2025-36599

Dell PowerFlex Manager VM, versions prior to 4.6.2.1, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be...

CVE-2025-7097

CVE-2025-7097 affects Comodo Internet Security Premium 12.3.4.8162. The vulnerability is in the Manifest File Handler’s cis_update_x64.xml processing, where manipulating the binary/params argument enables os command injection. Exploitation is network‑based and may be remote; attack complexity is ...

CVE-2025-7082

The CVE-2025-7082 entry concerns Belkin F9K1122 (firmware 1.00.33) and the webs component, specifically the function formBSSetSitesurvey in /goform/formBSSetSitesurvey. The vulnerability arises from improper handling/manipulation of the arguments wan_ipaddr, wan_netmask, wan_gateway, and wl_ssid,...

Path Traversal

@modelcontextprotocol/server-filesystem is vulnerable to path traversal. The vulnerability is due to improper validation of directory prefixes, which allows an attacker to access unintended files by crafting paths that match allowed directory prefixes...

CVE-2025-6412

The CVE-2025-6412 entry affects PHPGurukul Art Gallery Management System 1.1, specifically the /admin/changeimage.php endpoint where the editid parameter is vulnerable to SQL injection. The vulnerability can be triggered remotely, and exploits have been disclosed publicly. Multiple references cor...