EUVD-2024-19399

Malicious code in bioql PyPI...

EUVD-2024-25240

Malicious code in bioql PyPI...

EUVD-2022-3514

Malicious code in bioql PyPI...

EUVD-2023-57923

Malicious code in bioql PyPI...

EUVD-2023-33533

Malicious code in bioql PyPI...

EUVD-2022-31467

Malicious code in bioql PyPI...

EUVD-2023-44663

Malicious code in bioql PyPI...

EUVD-2024-34437

Malicious code in bioql PyPI...

EUVD-2022-33819

Malicious code in bioql PyPI...

EUVD-2022-52402

Malicious code in bioql PyPI...

EUVD-2021-31364

Malicious code in bioql PyPI...

WordPress plugin Silencesoft RSS Reader 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...

Jinher OA 代码问题漏洞

Jinher OA is a collaborative management software from Jinher, China. A code issue vulnerability exists in Jinher OA version 2.0, which originates from the file /c6/Jhsoft.Web.module/ToolBar/ManageWord.aspx/?text=GetUrl&style=1 There is a reference to an external entity in XML, which could lead to...

WeKnora 代码问题漏洞

WeKnora is an LLM-based framework open-sourced by Tencent, with features such as deep document understanding, semantic retrieval and context-aware answers using the RAG paradigm. A code issue vulnerability exists in WeKnora version 0.1.0, which stems from incorrect manipulation of the parameter...

Flag Forge 代码问题漏洞

Flag Forge is an easy-to-use CTF platform open-sourced by FlagForge. A code issue vulnerability exists in Flag Forge version 2.2.0 through versions prior to 2.3.1, which stems from improper handling of session expiration and could lead to unauthorized operations...

Ensembling Large Language Models for Code Vulnerability Detection: an Empirical Evaluation

Code vulnerability detection is crucial for ensuring the security and reliability of modern software systems. Recently, Large Language Models LLMs have shown promising capabilities in this domain. However, notable discrepancies in detection results often arise when analyzing identical code segmen...

CVE-2025-56448

The Positron PX360BT SW REV 8 car alarm system is vulnerable to a replay attack due to a failure in implementing rolling code security. The alarm system does not properly rotate or invalidate used codes, allowing repeated reuse of captured transmissions. This exposes users to significant security...

ZKEACMS 代码问题漏洞

ZKEACMS is a visually designed, WYSIWYG content management system from ZKEASOFT open source. A code issue vulnerability exists in ZKEACMS version 4.3, which stems from the incorrect manipulation of the parameter url of the function Proxy in the file src/ZKEACMS/Controllers/MediaController.cs, whi...

GHSA-QXFV-FCPC-W36X Claude Code rg vulnerability does not protect against approval prompt bypass

Due to an error in command parsing, it was possible to bypass the Claude Code confirmation prompt to trigger execution of an untrusted command. Reliably exploiting this requires the ability to add untrusted content into a Claude Code context window. Users on standard Claude Code auto-update will...

UPDF 代码问题漏洞

UPDF is a multi-platform PDF editor from the Chinese company UPDF. A code issue vulnerability exists in UPDF version 1.8.5.0, which stems from DLL search path hijacking and could lead to the execution of arbitrary code...