EUVD-2025-15836

Malicious code in bioql PyPI...

EUVD-2024-49339

Malicious code in bioql PyPI...

EUVD-2022-46553

Malicious code in bioql PyPI...

EUVD-2024-34028

Malicious code in bioql PyPI...

EUVD-2025-2256

Malicious code in bioql PyPI...

EUVD-2024-36454

Malicious code in bioql PyPI...

EUVD-2023-44438

Malicious code in bioql PyPI...

EUVD-2025-6536

Malicious code in bioql PyPI...

EUVD-2024-36674

Malicious code in bioql PyPI...

CVE-2025-8513

A vulnerability, which was classified as problematic, was found in Caixin News App 8.0.1 on Android. Affected is an unknown function of the file AndroidManifest.xml of the component com.caixin.news. The manipulation leads to improper export of android application components. Local access is...

PT-2025-30304 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions prior to 9.11.0.0 Description: Dell PowerScale OneFS is affected by a use of a broken or risky cryptographic algorithm. A high privileged attacker with remote access could potentially exploit this, leading to...

CVE-2025-7829

CVE-2025-7829 affects Church Donation System 1.0. The vulnerability is a SQL injection in the login flow, specifically targeting the Username parameter in /login.php. The issue can be triggered remotely and exploit information has been publicly disclosed. Multiple connected sources corroborate: t...

Path Traversal

Measured is vulnerable to Path Traversal. The vulnerability is due to insufficient input validation when initializing the class, which allows an attacker to manipulate inputs and instruct the library to read arbitrary files...

PT-2025-29342 · Open5Gs · Open5Gs

Name of the Vulnerable Software and Affected Versions: Open5GS versions up to 2.7.3 Description: A problematic issue exists in Open5GS related to the SCTP Partial Message Handler component. The ngap recv handler/s1ap recv handler/recv handler function is susceptible to a reachable assertion due t...

CVE-2025-36599

Dell PowerFlex Manager VM, versions prior to 4.6.2.1, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be...

CVE-2025-7097

CVE-2025-7097 affects Comodo Internet Security Premium 12.3.4.8162. The vulnerability is in the Manifest File Handler’s cis_update_x64.xml processing, where manipulating the binary/params argument enables os command injection. Exploitation is network‑based and may be remote; attack complexity is ...

CVE-2025-7082

The CVE-2025-7082 entry concerns Belkin F9K1122 (firmware 1.00.33) and the webs component, specifically the function formBSSetSitesurvey in /goform/formBSSetSitesurvey. The vulnerability arises from improper handling/manipulation of the arguments wan_ipaddr, wan_netmask, wan_gateway, and wl_ssid,...

Path Traversal

@modelcontextprotocol/server-filesystem is vulnerable to path traversal. The vulnerability is due to improper validation of directory prefixes, which allows an attacker to access unintended files by crafting paths that match allowed directory prefixes...

CVE-2025-6412

The CVE-2025-6412 entry affects PHPGurukul Art Gallery Management System 1.1, specifically the /admin/changeimage.php endpoint where the editid parameter is vulnerable to SQL injection. The vulnerability can be triggered remotely, and exploits have been disclosed publicly. Multiple references cor...

Path Traversal Vulnerability in Various ABB Products

ABB ASPECT-Enterprise is a scalable building energy management and control solution.ABB NEXUS Series is a monitoring and control management system.ABB MATRIX Series is an embedded IoT ASPECT control engine designed to provide flexible field control for medium to large field control applications. ...