EUVD-2022-5232

Malicious code in bioql PyPI...

EUVD-2024-32741

Malicious code in bioql PyPI...

EUVD-2024-43368

Malicious code in bioql PyPI...

EUVD-2024-3569

Malicious code in bioql PyPI...

EUVD-2024-42679

Malicious code in bioql PyPI...

EUVD-2025-22919

Malicious code in bioql PyPI...

EUVD-2024-47011

Malicious code in bioql PyPI...

EUVD-2025-15586

Malicious code in bioql PyPI...

EUVD-2023-56095

Malicious code in bioql PyPI...

EUVD-2022-6835

Malicious code in bioql PyPI...

EUVD-2022-43097

Malicious code in bioql PyPI...

EUVD-2024-32742

Malicious code in bioql PyPI...

CVE-2025-55795

The openml/openml.org web application version v2.0.20241110 uses incremental user IDs and insufficient email ownership verification during email update workflows. An authenticated attacker controlling a user account with a lower user ID can update their email address to that of another user with ...

CVE-2025-59934 Formbricks missing JWT signature verification

Formbricks is an open source qualtrics alternative. Prior to version 4.0.1, Formbricks is missing JWT signature verification. This vulnerability stems from a token validation routine that only decodes JWTs jwt.decode without verifying their signatures. Both the email verification token login path...

CVE-2025-59934 Formbricks missing JWT signature verification

Formbricks is an open source qualtrics alternative. Prior to version 4.0.1, Formbricks is missing JWT signature verification. This vulnerability stems from a token validation routine that only decodes JWTs jwt.decode without verifying their signatures. Both the email verification token login path...

CVE-2025-35436

CISA Thorium uses '.unwrap' to handle errors related to account verification email messages. An unauthenticated remote attacker could cause a crash by providing a specially crafted email address or response. Fixed in commit 6a65a27...

CVE-2025-35436 CISA Thorium account verification email error handling

CISA Thorium uses '.unwrap' to handle errors related to account verification email messages. An unauthenticated remote attacker could cause a crash by providing a specially crafted email address or response. Fixed in commit 6a65a27...

CVE-2025-35436 CISA Thorium account verification email error handling

CISA Thorium uses '.unwrap' to handle errors related to account verification email messages. An unauthenticated remote attacker could cause a crash by providing a specially crafted email address or response. Fixed in commit 6a65a27...

MYCVE

Hnaoyun Inc. PbootCMS Project V3.2.12 apps/home/controller/Mem...

Linux Distros Unpatched Vulnerability : CVE-2024-43416

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a free asset and IT management software package. Starting in version 0.80 and prior to version 10.0.17, an unauthenticated user can use an application...