EUVD-2024-0355

Malicious code in bioql PyPI...

EUVD-2025-22349

Malicious code in bioql PyPI...

EUVD-2024-31570

Malicious code in bioql PyPI...

EUVD-2025-4210

Malicious code in bioql PyPI...

EUVD-2025-32191

Malicious code in bioql PyPI...

EUVD-2024-41597

Malicious code in bioql PyPI...

EUVD-2023-31521

Malicious code in bioql PyPI...

EUVD-2025-31126

Malicious code in bioql PyPI...

EUVD-2025-24812

Malicious code in bioql PyPI...

EUVD-2025-7222

Malicious code in bioql PyPI...

EUVD-2024-40291

Malicious code in bioql PyPI...

EUVD-2022-4130

Malicious code in bioql PyPI...

EUVD-2022-6406

Malicious code in bioql PyPI...

EUVD-2024-54330

Malicious code in bioql PyPI...

EUVD-2022-6392

Malicious code in bioql PyPI...

EUVD-2023-29504

Malicious code in bioql PyPI...

Lovable VDP: Low-privileged user can enable or disable Lovable AI for new projects in workspace

A vulnerability was discovered that allowed low-privileged users to enable or disable Lovable AI for new projects in a workspace. The vulnerability was caused by improper authorization, which enabled low-privileged users to modify the Lovable AI settings by replaying certain API endpoints...

PT-2025-40515

Name of the Vulnerable Software and Affected Versions Joomla module mod vvisit counter version 2.0.4j3 Description A SQL injection issue exists in the mod vvisit counter module. An attacker can retrieve database content through the cip vvisitcounter cookie at any endpoint where the plugin tracks...

PT-2025-40598

Name of the Vulnerable Software and Affected Versions OpenSupports version 4.11.0 Description Two unauthenticated diagnostic endpoints permit arbitrary backend-initiated network connections to a destination specified by an attacker. These endpoints are accessible without authentication due to a...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal in the validLogFileName and validExecOutputFileName functions, which insufficiently validate log file names, allowing traversal sequences after certain prefixes. An attacker can access sensitive files on the host...