EUVD-2025-23534

Malicious code in bioql PyPI...

EUVD-2024-26939

Malicious code in bioql PyPI...

EUVD-2025-27856

Malicious code in bioql PyPI...

EUVD-2024-53622

Malicious code in bioql PyPI...

EUVD-2024-53878

Malicious code in bioql PyPI...

EUVD-2022-38396

Malicious code in bioql PyPI...

EUVD-2024-37352

Malicious code in bioql PyPI...

EUVD-2024-18163

Malicious code in bioql PyPI...

EUVD-2024-17100

Malicious code in bioql PyPI...

EUVD-2025-18176

Malicious code in bioql PyPI...

EUVD-2024-42136

Malicious code in bioql PyPI...

EUVD-2024-47491

Malicious code in bioql PyPI...

EUVD-2024-19368

Malicious code in bioql PyPI...

EUVD-2022-6989

Malicious code in bioql PyPI...

EUVD-2023-43817

Malicious code in bioql PyPI...

CVE-2024-13807 Xagio SEO <= 7.1.0.5 - Unauthenticated Sensitive Information Exposure via Unprotected Back-Up Files

The Xagio SEO plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.1.0.5 via the backup functionality due to weak filename structure and lack of protection in the directory. This makes it possible for unauthenticated attackers to extract...

CVE-2025-48862

Ambiguous wording in the web interface of the ctrlX OS setup mechanism could lead the user to believe that the backup file is encrypted when a password is set. However, only the private key - if available in the backup - is encrypted, while the backup file itself remains unencrypted...

CVE-2025-53394

Paramount Macrium Reflect through 2025-06-26 allows attackers to execute arbitrary code with administrator privileges via a crafted .mrimgx or .mrbax backup file and a renamed executable placed in the same directory. When a user with administrative privileges opens the crafted backup file and...

CVE-2025-53394

Paramount Macrium Reflect through 2025-06-26 allows attackers to execute arbitrary code with administrator privileges via a crafted .mrimgx or .mrbax backup file and a renamed executable placed in the same directory. When a user with administrative privileges opens the crafted backup file and...

CVE-2025-53394

Summary: CVE-2025-53394 affects Paramount Macrium Reflect (through 2025-06-26). Affected component/file handling when mounting backups allows local attackers with administrator privileges to execute arbitrary code by placing a crafted backup file and a renamed executable in the same directory. Ro...