EUVD-2015-4975

Malware in sbrugna...

EUVD-2018-13427

Malware in sbrugna...

EUVD-2019-6085

Malware in sbrugna...

EUVD-2012-3359

Malware in sbrugna...

EUVD-2024-1245

Malicious code in bioql PyPI...

EUVD-2023-54312

Malicious code in bioql PyPI...

EUVD-2025-0011

Malicious code in bioql PyPI...

EUVD-2022-5337

Malicious code in bioql PyPI...

EUVD-2023-2714

Malicious code in bioql PyPI...

EUVD-2023-50913

Malicious code in bioql PyPI...

EUVD-2025-9735

Malicious code in bioql PyPI...

EUVD-2022-6126

Malicious code in bioql PyPI...

EUVD-2023-3048

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2019-2183

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In generateServicesMap of RegisteredServicesCache.java, there is a possible account protection bypass due to a caching optimization. This could lead to local...

SUSE CVE-2025-9901

A flaw was found in libsoup's caching mechanism, SoupCache, where the HTTP Vary header is ignored when evaluating cached responses. This header ensures that responses vary appropriately based on request headers such as language or authentication. Without this check, cached content can be...

PT-2025-35713

Name of the Vulnerable Software and Affected Versions libsoup affected versions not specified Description A flaw exists in libsoup’s caching mechanism, SoupCache, where the HTTP Vary header is ignored when evaluating cached responses. The HTTP Vary header ensures that responses vary appropriately...

GraphQL Armor Max-Depth Plugin Bypass via fragment caching

Summary A query depth restriction using the max-depth can be bypassed if ignoreIntrospection is enabled which is the default configuration by naming your query/fragment schema. Details In the countDepth function, we have the following code that calculates the depth of a used fragment: typescript...

CVE-2025-54425 Umbraco's Delivery API allows for cached requests to be returned with an invalid API key

Umbraco is an ASP.NET CMS. In versions 13.0.0 through 13.9.2, 15.0.0 through 15.4.1 and 16.0.0 through 16.1.0, the content delivery API can be restricted from public access where an API key must be provided in a header to authorize the request. It's also possible to configure output caching, such...

PT-2025-31370 · Umbraco · Umbraco

Name of the Vulnerable Software and Affected Versions: Umbraco versions 13.0.0 through 13.9.2 Umbraco versions 15.0.0 through 15.4.1 Umbraco versions 16.0.0 through 16.1.0 Description: Umbraco’s content delivery API can be restricted to require an API key in a header for authorization. Output...

TencentOS Server 4: python-flask (TSSA-2025:0162)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0162 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...