EUVD-2022-2065

Malicious code in bioql PyPI...

EUVD-2025-24909

Malicious code in bioql PyPI...

EUVD-2024-47119

Malicious code in bioql PyPI...

EUVD-2025-22351

Malicious code in bioql PyPI...

EUVD-2025-28348

Malicious code in bioql PyPI...

EUVD-2025-30560

Malicious code in bioql PyPI...

EUVD-2024-34905

Malicious code in bioql PyPI...

EUVD-2024-27363

Malicious code in bioql PyPI...

EUVD-2023-26944

Malicious code in bioql PyPI...

EUVD-2021-29311

Malicious code in bioql PyPI...

EUVD-2021-28594

Malicious code in bioql PyPI...

EUVD-2022-33592

Malicious code in bioql PyPI...

EUVD-2025-8236

Malicious code in bioql PyPI...

EUVD-2024-34903

Malicious code in bioql PyPI...

EUVD-2025-28736

Malicious code in bioql PyPI...

netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions

A flaw in Netty’s HTTP/1.1 chunked encoding parser allows newline LF characters in chunk extensions to be incorrectly treated as the end of the chunk-size line instead of requiring the proper CRLF sequence. This discrepancy can be exploited in rare cases where a reverse proxy interprets the same...

netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions

A flaw in Netty’s HTTP/1.1 chunked encoding parser allows newline LF characters in chunk extensions to be incorrectly treated as the end of the chunk-size line instead of requiring the proper CRLF sequence. This discrepancy can be exploited in rare cases where a reverse proxy interprets the same...

API Attack Awareness: Broken Object Level Authorization (BOLA) – Why It Tops the OWASP API Top 10

For this Cybersecurity Awareness Month, we thought it important to draw attention to some of the most common and dangerous API vulnerabilities. This week, we’re starting with Broken Object Level Authorization BOLA. BOLA vulnerabilities top the OWASP API Top Ten. And for good reason: they’re...

CVE-2025-11221

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal', Unrestricted Upload of File with Dangerous Type vulnerability in GTONE ChangeFlow allows Path Traversal, Accessing Functionality Not Properly Constrained by ACLs.This issue affects ChangeFlow: from All versions through...

Access Control Bypass

Overview FormCMS is a FormCMS is an open-source Content Management System designed to simplify and accelerate web development workflows for CMS projects and general web applications. It streamlines data modeling, backend development, and frontend design, making them as intuitive as filling out a...