EUVD-2025-29034

Malicious code in bioql PyPI...

EUVD-2022-6854

Malicious code in bioql PyPI...

EUVD-2021-8709

Malicious code in bioql PyPI...

EUVD-2023-46934

Malicious code in bioql PyPI...

EUVD-2025-30258

Malicious code in bioql PyPI...

EUVD-2025-21824

Malicious code in bioql PyPI...

EUVD-2022-5623

Malicious code in bioql PyPI...

EUVD-2024-35155

Malicious code in bioql PyPI...

EUVD-2023-0551

Malicious code in bioql PyPI...

EUVD-2023-23566

Malicious code in bioql PyPI...

EUVD-2021-28231

Malicious code in bioql PyPI...

EUVD-2022-5079

Malicious code in bioql PyPI...

EUVD-2025-27768

Malicious code in bioql PyPI...

CVE-2025-9209

The RestroPress – Online Food Ordering System plugin for WordPress is vulnerable to Authentication Bypass in versions 3.0.0 to 3.1.9.2. This is due to the plugin exposing user private tokens and API data via the /wp-json/wp/v2/users REST API endpoint. This makes it possible for unauthenticated...

Renault UK Customer Records Stolen in Third-Party Breach

Renault UK warns customers of a third-party data breach exposing personal details, stressing vigilance against fraud and confirming no bank data lost...

CVE-2025-59406

The Flock Safety Pisco com.flocksafety.android.pisco application 6.21.11 for Android installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices has a cleartext Auth0 client secret in its codebase. Because application binaries can be trivially decompiled or inspected,...

Apache Kylin Files or Directories Accessible to External Parties

Files or Directories Accessible to External Parties vulnerability in Apache Kylin. You are fine as long as the Kylin's system and project admin access is well protected. This issue affects Apache Kylin: from 4.0.0 through 5.0.2. Users are recommended to upgrade to version 5.0.3, which fixes the...

Files or Directories Accessible to External Parties

Overview Affected versions of this package are vulnerable to Files or Directories Accessible to External Parties due to improper restriction of file read. An attacker can obtain sensitive information by sending crafted requests to exposed resources. Note: This is only exploitable if the attacker...

Redis Unix-domain socket may have be exposed with the wrong permissions for a short time window.

...

CVE-2025-10744

The File Manager, Code Editor, and Backup by Managefy plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.6.1 through publicly exposed log files. This makes it possible for unauthenticated attackers to view information like full paths and...