EUVD-2021-28674

Malicious code in bioql PyPI...

EUVD-2025-9004

Malicious code in bioql PyPI...

EUVD-2023-0150

Malicious code in bioql PyPI...

EUVD-2025-14280

Malicious code in bioql PyPI...

EUVD-2025-10015

Malicious code in bioql PyPI...

EUVD-2024-52588

Malicious code in bioql PyPI...

EUVD-2024-25005

Malicious code in bioql PyPI...

EUVD-2025-6513

Malicious code in bioql PyPI...

EUVD-2024-20749

Malicious code in bioql PyPI...

EUVD-2025-8935

Malicious code in bioql PyPI...

EUVD-2021-27949

Malicious code in bioql PyPI...

EUVD-2022-34194

Malicious code in bioql PyPI...

EUVD-2024-2709

Malicious code in bioql PyPI...

CVE-2025-59298

Delta Electronics DIAScreen is affected by a file-parsing out-of-bounds write vulnerability. The issue arises from insufficient validation of user-supplied DIAScreen project/file data, allowing an attacker to execute arbitrary code in the context of the current process when a user opens a malicio...

MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of MLflow Tracking Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of model file paths. The issue results from the lack of proper...

Ubuntu 22.04 LTS / 24.04 LTS / 25.04 : Ghostscript vulnerabilities (USN-7782-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7782-1 advisory. It was discovered that Ghostscript incorrectly handled opening a file to write. An attacker could possibly use this issue to cause...

Insecure file handling vulnerability

...

Vvveb 安全漏洞

Vvveb is a powerful and easy-to-use CMS from Givan Individual Developers for building websites, blogs or e-commerce stores. A security vulnerability exists in Vvveb version 1.0.7.2 and earlier, which stems from a flaw in the configuration file handling component that could lead to information...

SetupHijack Privilege Escalation Tool

SetupHijack is a security research tool that exploits race conditions and insecure file handling in Windows installer and update processes. It targets scenarios where privileged installers or updaters drop files in %TEMP% or other world-writable locations, allowing an attacker to replace these...

CVE-2025-34194

Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 25.1.102 and Application versions prior to 25.1.1413 Windows client deployments contain an insecure temporary-file handling vulnerability in the PrinterInstallerClient components. The software creates files as NT...