EUVD-2021-9425

Malicious code in bioql PyPI...

EUVD-2022-33356

Malicious code in bioql PyPI...

EUVD-2023-32489

Malicious code in bioql PyPI...

EUVD-2023-2879

Malicious code in bioql PyPI...

EUVD-2023-30844

Malicious code in bioql PyPI...

EUVD-2023-33638

Malicious code in bioql PyPI...

EUVD-2024-53557

Malicious code in bioql PyPI...

EUVD-2023-50536

Malicious code in bioql PyPI...

EUVD-2023-46980

Malicious code in bioql PyPI...

EUVD-2023-59654

Malicious code in bioql PyPI...

EUVD-2025-9734

Malicious code in bioql PyPI...

EUVD-2022-6349

Malicious code in bioql PyPI...

CVE-2025-34139

A vulnerability exists in Sitecore Experience Manager XM, Experience Platform XP, Experience Commerce XC, and Managed Cloud that could allow an unauthenticated attacker to read arbitrary files. This vulnerability affects all Experience Platform topologies XM, XP, XC from 8.0 Initial Release throu...

CVE-2025-54310

qBittorrent before 5.1.2 does not prevent access to a local file that is referenced in a link URL. This affects rsswidget.cpp and searchjobwidget.cpp...

CVE-2025-7667

The Restrict File Access plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.2. This is due to missing or incorrect nonce validation on the 'restrict-file-access' page. This makes it possible for unauthenticated attackers to to delete arbitra...

CVE-2025-53964

GoldenDict versions 1.5.0 and 1.5.1 are vulnerable to an exposed dangerous method (CWE-749) that allows for unauthorized file operations. An attacker can exploit this by having a user add a crafted dictionary ; subsequently, searching for any term within that dictionary enables the attacker to re...

The vulnerability of the Windows Performance Recorder (WPR) tool on Microsoft Windows operating systems allows a perpetrator to cause a service failure.

The vulnerability of the Windows Performance Recorder WPR tool on Microsoft Windows operating systems is related to the incorrect handling of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-41667 Phoenix Contact: File access due to the replacement of a critical file used by the arp-preinit script

A low privileged remote attacker with file access can replace a critical file used by the arp-preinit script to get read, write and execute access to any file on the device...

CVE-2025-41666 Phoenix Contact: File access due to the replacement of a critical file used by the watchdog

A low privileged remote attacker with file access can replace a critical file used by the watchdog to get read, write and execute access to any file on the device after the watchdog has been initialized...

CVE-2025-34076 Microweber CMS Authenticated Local File Inclusion via Backup API

An authenticated local file inclusion vulnerability exists in Microweber CMS versions = 1.2.11 through misuse of the backup management API. Authenticated users can abuse the /api/BackupV2/upload and /api/BackupV2/download endpoints to read arbitrary files from the underlying filesystem. By...