EUVD-2024-3122

Malicious code in bioql PyPI...

EUVD-2022-0137

Malicious code in bioql PyPI...

EUVD-2022-2257

Malicious code in bioql PyPI...

EUVD-2025-18866

Malicious code in bioql PyPI...

EUVD-2022-39488

Malicious code in bioql PyPI...

EUVD-2022-1593

Malicious code in bioql PyPI...

EUVD-2022-6293

Malicious code in bioql PyPI...

EUVD-2024-16249

Malicious code in bioql PyPI...

EUVD-2025-24155

Malicious code in bioql PyPI...

EUVD-2022-55319

Malicious code in bioql PyPI...

EUVD-2022-6771

Malicious code in bioql PyPI...

CVE-2025-60661

Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the cloneType parameter in the fromAdvSetMacMtuWan function...

PT-2025-40406

Name of the Vulnerable Software and Affected Versions Tenda AC18 version 15.03.05.19 Description The Tenda AC18 version 15.03.05.19 contains a stack overflow issue. This occurs through the cloneType parameter within the fromAdvSetMacMtuWan function. Recommendations At the moment, there is no...

CVE-2025-59531

CVE-2025-59531 affects Argo CD versions 1.2.0–1.8.7, 2.0.0-rc1–2.14.19, and 3.0.0-rc1–3.2.0-rc1, plus 3.1.7 and 3.0.18. The issue arises when the webhook Bitbucket Server payload is malformed and webhook.bitbucketserver.secret is not configured, causing the /api/webhook endpoint to crash and pote...

CVE-2023-53489

In the Linux kernel, the following vulnerability has been resolved: tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp. syzkaller reported 0 memory leaks of an UDP socket and ZEROCOPY skbs. We can reproduce the problem with these sequences: sk = socketAFINET, SOCKDGRAM, 0...

Improper Check or Handling of Exceptional Conditions

Overview Affected versions of this package are vulnerable to Improper Check or Handling of Exceptional Conditions in the /api/webhook endpoint. An attacker can cause the server to crash and disrupt service availability by sending a Bitbucket Server Push event with JSON field repository.links.clon...

Improper Check or Handling of Exceptional Conditions

Overview Affected versions of this package are vulnerable to Improper Check or Handling of Exceptional Conditions in the /api/webhook endpoint. An attacker can cause the server to crash and disrupt service availability by sending a Bitbucket Server Push event with JSON field repository.links.clon...

Improper Check or Handling of Exceptional Conditions

Overview Affected versions of this package are vulnerable to Improper Check or Handling of Exceptional Conditions in the /api/webhook endpoint. An attacker can cause the server to crash and disrupt service availability by sending a Bitbucket Server Push event with JSON field repository.links.clon...

GHSA-F9GQ-PRRC-HRHC Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload

Summary Unpatched Argo CD versions are vulnerable to malicious API requests which can crash the API server and cause denial of service to legitimate clients. With the default configuration, no webhook.bitbucketserver.secret set, Argo CD’s /api/webhook endpoint will crash the entire argocd-server...

PT-2025-40055

Name of the Vulnerable Software and Affected Versions Argo CD versions 1.2.0 through 1.8.7 Argo CD versions 2.0.0-rc1 through 2.14.19 Argo CD versions 3.0.0-rc1 through 3.2.0-rc1 Argo CD version 3.1.7 Argo CD version 3.0.18 Description Argo CD is susceptible to denial of service through malicious...