EUVD-2025-23169

Malicious code in bioql PyPI...

EUVD-2024-43368

Malicious code in bioql PyPI...

EUVD-2024-47011

Malicious code in bioql PyPI...

EUVD-2023-56095

Malicious code in bioql PyPI...

EUVD-2024-51652

Malicious code in bioql PyPI...

EUVD-2021-32520

Malicious code in bioql PyPI...

EUVD-2023-1543

Malicious code in bioql PyPI...

EUVD-2024-42679

Malicious code in bioql PyPI...

EUVD-2025-31394

Malicious code in bioql PyPI...

EUVD-2024-32742

Malicious code in bioql PyPI...

EUVD-2023-34238

Malicious code in bioql PyPI...

CVE-2025-55795

The openml/openml.org web application version v2.0.20241110 uses incremental user IDs and insufficient email ownership verification during email update workflows. An authenticated attacker controlling a user account with a lower user ID can update their email address to that of another user with ...

CVE-2025-59934 Formbricks missing JWT signature verification

Formbricks is an open source qualtrics alternative. Prior to version 4.0.1, Formbricks is missing JWT signature verification. This vulnerability stems from a token validation routine that only decodes JWTs jwt.decode without verifying their signatures. Both the email verification token login path...

CVE-2025-59934 Formbricks missing JWT signature verification

Formbricks is an open source qualtrics alternative. Prior to version 4.0.1, Formbricks is missing JWT signature verification. This vulnerability stems from a token validation routine that only decodes JWTs jwt.decode without verifying their signatures. Both the email verification token login path...

CVE-2025-35436

CISA Thorium uses '.unwrap' to handle errors related to account verification email messages. An unauthenticated remote attacker could cause a crash by providing a specially crafted email address or response. Fixed in commit 6a65a27...

CVE-2025-35436 CISA Thorium account verification email error handling

CISA Thorium uses '.unwrap' to handle errors related to account verification email messages. An unauthenticated remote attacker could cause a crash by providing a specially crafted email address or response. Fixed in commit 6a65a27...

CVE-2025-35436 CISA Thorium account verification email error handling

CISA Thorium uses '.unwrap' to handle errors related to account verification email messages. An unauthenticated remote attacker could cause a crash by providing a specially crafted email address or response. Fixed in commit 6a65a27...

MYCVE

Hnaoyun Inc. PbootCMS Project V3.2.12 apps/home/controller/Mem...

Linux Distros Unpatched Vulnerability : CVE-2024-43416

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a free asset and IT management software package. Starting in version 0.80 and prior to version 10.0.17, an unauthenticated user can use an application...

Linux Distros Unpatched Vulnerability : CVE-2019-14880

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Moodle versions 3.7 before 3.7.3, 3.6 before 3.6.7, 3.5 before 3.5.9 and earlier. OAuth 2 providers who do not verify users' email...