EUVD-2023-34244

Malicious code in bioql PyPI...

EUVD-2025-19724

Malicious code in bioql PyPI...

EUVD-2025-5969

Malicious code in bioql PyPI...

EUVD-2022-24942

Malicious code in bioql PyPI...

EUVD-2024-16984

Malicious code in bioql PyPI...

EUVD-2024-2697

Malicious code in bioql PyPI...

EUVD-2024-50530

Malicious code in bioql PyPI...

EUVD-2024-48047

Malicious code in bioql PyPI...

EUVD-2023-34339

Malicious code in bioql PyPI...

EUVD-2022-52014

Malicious code in bioql PyPI...

EUVD-2022-51890

Malicious code in bioql PyPI...

EUVD-2022-6348

Malicious code in bioql PyPI...

EUVD-2024-2858

Malicious code in bioql PyPI...

CVE-2025-9891

The User Sync – Remote User Sync plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2. This is due to missing or incorrect nonce validation on the mousersyncformhandler function. This makes it possible for unauthenticated attackers to...

CVE-2023-53394 net/mlx5e: xsk: Fix crash on regular rq reactivation

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: xsk: Fix crash on regular rq reactivation When the regular rq is reactivated after the XSK socket is closed it could be reading stale cqes which eventually corrupts the rq. This leads to no more traffic being received ...

CVE-2025-9891

The User Sync – Remote User Sync plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2. This is due to missing or incorrect nonce validation on the mousersyncformhandler function. This makes it possible for unauthenticated attackers to...

CVE-2025-9891 User Sync – Remote User Sync <= 1.0.2 - Cross-Site Request Forgery to Plugin Deactivation

The User Sync – Remote User Sync plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2. This is due to missing or incorrect nonce validation on the mousersyncformhandler function. This makes it possible for unauthenticated attackers to...

CVE-2025-9891

The CVE-2025-9891 entry concerns the WordPress plugin User Sync – Remote User Sync . It is vulnerable to Cross-Site Forgery (CSRF) in all versions up to and including 1.0.2 due to missing or incorrect nonce validation in the function mo_user_sync_form_handler(). This enables unauthenticated attac...

CVE-2025-9891 User Sync – Remote User Sync <= 1.0.2 - Cross-Site Request Forgery to Plugin Deactivation

The User Sync – Remote User Sync plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2. This is due to missing or incorrect nonce validation on the mousersyncformhandler function. This makes it possible for unauthenticated attackers to...

PT-2025-38104

Name of the Vulnerable Software and Affected Versions: User Sync – Remote User Sync plugin for WordPress versions prior to 1.0.3 Description: The User Sync – Remote User Sync plugin for WordPress is susceptible to Cross-Site Request Forgery. This is due to missing or incorrect nonce validation in...