2059 matches found
CVE-2025-8406
ZenML version 0.83.1 is affected by a path traversal vulnerability in the PathMaterializer class. The load function uses ispathwithindirectory to validate files during data.tar.gz extraction, which fails to effectively detect symbolic and hard links. This vulnerability can lead to arbitrary file...
CVE-2025-8406
ZenML 0.83.1 is affected by a path traversal flaw in PathMaterializer during data.tar.gz extraction; is_path_within_directory fails to catch symbolic/hard links, enabling arbitrary file writes and potential command execution if critical files are overwritten. Remediation present in connected docs...
CVE-2025-8406 Path Traversal in zenml-io/zenml
ZenML version 0.83.1 is affected by a path traversal vulnerability in the PathMaterializer class. The load function uses ispathwithindirectory to validate files during data.tar.gz extraction, which fails to effectively detect symbolic and hard links. This vulnerability can lead to arbitrary file...
CVE-2025-10582
The WP Dispatcher plugin for WordPress is vulnerable to SQL Injection via the ‘id’ parameter in all versions up to, and including, 1.2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticat...
CVE-2025-9199
The Woo superb slideshow transition gallery with random effect plugin for WordPress is vulnerable to SQL Injection via the 'woo-superb-slideshow' shortcode in all versions up to, and including, 9.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on t...
CVE-2025-9200
The Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App plugin for WordPress is vulnerable to SQL Injection via the nhynaacomments function in all versions up to, and including, 0.8.8.8 due to insufficient escaping on the user supplied parameter and lack of sufficient...
EUVD-2024-24349
Malicious code in bioql PyPI...
EUVD-2024-26863
Malicious code in bioql PyPI...
EUVD-2024-16941
Malicious code in bioql PyPI...
EUVD-2025-26178
Malicious code in bioql PyPI...
EUVD-2025-5889
Malicious code in bioql PyPI...
EUVD-2024-50750
Malicious code in bioql PyPI...
EUVD-2023-30370
Malicious code in bioql PyPI...
EUVD-2024-54161
Malicious code in bioql PyPI...
EUVD-2024-26864
Malicious code in bioql PyPI...
EUVD-2023-54571
Malicious code in bioql PyPI...
EUVD-2025-27075
Malicious code in bioql PyPI...
EUVD-2022-0999
Malicious code in bioql PyPI...