EUVD-2022-41159

Malicious code in bioql PyPI...

EUVD-2022-39647

Malicious code in bioql PyPI...

EUVD-2022-50287

Malicious code in bioql PyPI...

EUVD-2025-29486

Malicious code in bioql PyPI...

EUVD-2023-40557

Malicious code in bioql PyPI...

EUVD-2025-20432

Malicious code in bioql PyPI...

EUVD-2025-20431

Malicious code in bioql PyPI...

EUVD-2024-54682

Malicious code in bioql PyPI...

EUVD-2021-28593

Malicious code in bioql PyPI...

EUVD-2025-0022

Malicious code in bioql PyPI...

EUVD-2024-34452

Malicious code in bioql PyPI...

EUVD-2021-27506

Malicious code in bioql PyPI...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via improper validation of the import directory path configuration. An attacker can execute arbitrary code by uploading a malicious plugin to the prepackaged plugins directory. This is only exploitable if the attacke...

Directory Traversal

Overview flowise-components is a Flowiseai Components Affected versions of this package are vulnerable to Directory Traversal via improper validation of the chatId parameter in the file access process. An attacker can access sensitive files on the server filesystem, including database files...

PT-2025-36651

Soft Serve vulnerable to arbitrary file writing through SSH API in github.com/charmbracelet/soft-serve...

CVE-2025-58355 Soft Serve is vulnerable to arbitrary file writing through its SSH API

Soft Serve is a self-hostable Git server for the command line. In versions 0.9.1 and below, attackers can create or override arbitrary files with uncontrolled data through its SSH API. This issue is fixed in version 0.10.0...

CVE-2025-58355 Soft Serve is vulnerable to arbitrary file writing through its SSH API

Soft Serve is a self-hostable Git server for the command line. In versions 0.9.1 and below, attackers can create or override arbitrary files with uncontrolled data through its SSH API. This issue is fixed in version 0.10.0...

GO-2025-3800 eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper

eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper...

CVE-2025-6704

An arbitrary file writing vulnerability in the Secure PDF eXchange SPX feature of Sophos Firewall versions older than 21.0 MR2 21.0.2 can lead to pre-auth remote code execution, if a specific configuration of SPX is enabled in combination with the firewall running in High Availability HA mode...

CVE-2025-6704

An arbitrary file writing vulnerability in the Secure PDF eXchange SPX feature of Sophos Firewall versions older than 21.0 MR2 21.0.2 can lead to pre-auth remote code execution, if a specific configuration of SPX is enabled in combination with the firewall running in High Availability HA mode...