EUVD-2024-54904

Malicious code in bioql PyPI...

EUVD-2025-8192

Malicious code in bioql PyPI...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: clickhouse-operator, chart-testing, cni-plugins, knative-serving, azuredisk-csi, hubble, oauth2-proxy, migrate, harbor-cli, ip-masq-agent, dragonfly-operator, node-problem-detector, kubernetes-dashboard-api, ratify, aactl, delve, spark-operator, linkerd2-cni-plugin,...

Malicious code in cg-scratch-zh (npm)

The package cg-scratch-zh was found to contain malicious code...

MAL-2025-43752 Malicious code in cg-scratch-zh (npm)

The package cg-scratch-zh was found to contain malicious code...

arthexis (>=0.1.3, <=0.1.13), cdm-ecommerce-backend (0.1.0) +41 more potentially affected by CVE-2025-57833 via django (>=5.2.0a1, <=5.2.5)

django PYPI version =5.2.0a1, =0.1.3, =0.1.0, =0.1.0, =1.3.0, =0.1.0, =2025.7.0, =1.5.7, =1.0.3, =1.2.0 and more Source cves: CVE-2025-57833 Source advisory: MEND:CVE-2025-57833...

PT-2025-36373

Name of the Vulnerable Software and Affected Versions: D-Link DIR-825 version 1.08.01 Description: A buffer overflow issue exists in the httpd component of D-Link DIR-825. The get ping6 app stat function within the ping6 response.cg file is affected. Manipulation of the ping6 ipaddr argument can...

Linux Distros Unpatched Vulnerability : CVE-2008-5144

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvidia-cg-toolkit-installer in nvidia-cg-toolkit 2.0.0015 allows local users to overwrite arbitrary files via a symlink attack on the...

CVE-2024-53499

Jeewms v3.7 was discovered to contain a SQL injection vulnerability via the CgReportController API...

CVE-2024-53499

Jeewms v3.7 was discovered to contain a SQL injection vulnerability via the CgReportController API...

PT-2025-34471 · Jeewms · Jeewms

Name of the Vulnerable Software and Affected Versions: Jeewms version 3.7 Description: Jeewms version 3.7 contains a SQL injection vulnerability via the CgReportController API. The vulnerability is located in the CgReportController API endpoint. Recommendations: At the moment, there is no...

Malicious code in queue-consumer-cg (npm)

The package queue-consumer-cg was found to contain malicious code...

MAL-2025-31290 Malicious code in queue-consumer-cg (npm)

The package queue-consumer-cg was found to contain malicious code...

MAL-2025-12604 Malicious code in @zalastax/nolb-node-cg (npm)

The package @zalastax/nolb-node-cg was found to contain malicious code...

VulnCheck KEV: CVE-2025-34141

A reflected cross-site scripting XSS vulnerability exists in ETQ Reliance CG legacy platform within the SQLConverterServlet component. This vulnerability requires user interaction, such as clicking a crafted link, and may result in execution of unauthorized scripts in the user's context. The...

GHSA-5662-CV6M-63WH vulnerabilities

Vulnerabilities for packages: cg...

CVE-2025-54059 vulnerabilities

Vulnerabilities for packages: cg...

CVE-2025-34141

A reflected cross-site scripting XSS vulnerability exists in ETQ Reliance CG legacy platform within the SQLConverterServlet component. This vulnerability requires user interaction, such as clicking a crafted link, and may result in execution of unauthorized scripts in the user's context. The...

CVE-2025-34141

A reflected cross-site scripting XSS vulnerability exists in ETQ Reliance CG legacy platform within the SQLConverterServlet component. This vulnerability requires user interaction, such as clicking a crafted link, and may result in execution of unauthorized scripts in the user's context. The...

CVE-2025-34141 ETQ Reliance CG < SE.2025.1 Reflected XSS in `SQLConverterServlet`

A reflected cross-site scripting XSS vulnerability exists in ETQ Reliance CG legacy platform within the SQLConverterServlet component. This vulnerability requires user interaction, such as clicking a crafted link, and may result in execution of unauthorized scripts in the user's context. The...