CVE-2025-58581 Information Disclosure Through Stacktrace-/MQTT/Config/changeAll

When an error occurs in the application a full stacktrace is provided to the user. The stacktrace lists class and method names as well as other internal information. An attacker can thus obtain information about the technology used and the structure of the application...

EUVD-2023-43395

Malicious code in bioql PyPI...

EUVD-2023-55148

Malicious code in bioql PyPI...

EUVD-2022-1214

Malicious code in bioql PyPI...

EUVD-2024-27280

Malicious code in bioql PyPI...

EUVD-2022-51620

Malicious code in bioql PyPI...

EUVD-2022-2230

Malicious code in bioql PyPI...

EUVD-2023-33908

Malicious code in bioql PyPI...

EUVD-2024-51925

Malicious code in bioql PyPI...

EUVD-2022-26446

Malicious code in bioql PyPI...

EUVD-2023-33959

Malicious code in bioql PyPI...

CVE-2025-23262

NVIDIA ConnectX contains a vulnerability in the management interface, where an attacker with local access could cause incorrect authorization to modify the configuration. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure,...

Mautic 安全漏洞

Mautic is an open source marketing automation software from Mautic Open Source. The software monitors and manages websites, sends emails and manages customer resources. A security vulnerability exists in Mautic that stems from an administrator being able to change the mautic application...

CVE-2025-8264

Versions of the package z-push/z-push-dev before 2.7.6 are vulnerable to SQL Injection due to unparameterized queries in the IMAP backend. An attacker can inject malicious commands by manipulating the username field in basic authentication. This allows the attacker to access and potentially modif...

CVE-2025-8264

Versions of the package z-push/z-push-dev before 2.7.6 are vulnerable to SQL Injection due to unparameterized queries in the IMAP backend. An attacker can inject malicious commands by manipulating the username field in basic authentication. This allows the attacker to access and potentially modif...

CVE-2025-8264

Versions of the package z-push/z-push-dev before 2.7.6 are vulnerable to SQL Injection due to unparameterized queries in the IMAP backend. An attacker can inject malicious commands by manipulating the username field in basic authentication. This allows the attacker to access and potentially modif...

CVE-2025-8264

Versions of the package z-push/z-push-dev before 2.7.6 are vulnerable to SQL Injection due to unparameterized queries in the IMAP backend. An attacker can inject malicious commands by manipulating the username field in basic authentication. This allows the attacker to access and potentially modif...

CVE-2025-52954

A Missing Authorization vulnerability in the internal virtual routing and forwarding VRF of Juniper Networks Junos OS Evolved allows a local, low-privileged user to gain root privileges, leading to a system compromise. Any low-privileged user with the capability to send packets over the internal...

CVE-2025-41224

A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X All versions V5.10.0, RUGGEDCOM RMC8388NC V5.X All versions V5.10.0, RUGGEDCOM RS416NCv2 V5.X All versions V5.10.0, RUGGEDCOM RS416PNCv2 V5.X All versions V5.10.0, RUGGEDCOM RS416Pv2 V5.X All versions V5.10.0, RUGGEDCOM RS416v2 V5.X Al...

TencentOS Server 4: osc (TSSA-2025:0150)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0150 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...