EUVD-2024-46290

Malicious code in bioql PyPI...

EUVD-2025-24550

Malicious code in bioql PyPI...

EUVD-2025-4169

Malicious code in bioql PyPI...

EUVD-2023-29706

Malicious code in bioql PyPI...

EUVD-2023-50413

Malicious code in bioql PyPI...

EUVD-2025-28867

Malicious code in bioql PyPI...

EUVD-2024-50262

Malicious code in bioql PyPI...

EUVD-2022-41795

Malicious code in bioql PyPI...

EUVD-2024-36030

Malicious code in bioql PyPI...

EUVD-2024-42209

Malicious code in bioql PyPI...

EUVD-2023-1243

Malicious code in bioql PyPI...

EUVD-2025-24553

Malicious code in bioql PyPI...

EUVD-2022-1294

Malicious code in bioql PyPI...

Canonical LXD Arbitrary File Read via Template Injection in Snapshot Patterns

Impact In LXD's instance snapshot creation functionality, the Pongo2 template engine is used in the snapshots.pattern configuration for generating snapshot names. While code execution functionality has not been found in this template engine, it has file reading capabilities, creating a...

Traccar 安全漏洞

Traccar is a Java-based website builder that provides GPS tracking capabilities from Traccar, Inc. in the United States. The software supports more than 170 GPS protocols and more than 1500 models of GPS tracking devices.Traccar can be used with any major SQL database system. It also provides an...

SUSE CVE-2025-59352

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the gRPC API and HTTP APIs allow peers to send requests that force the recipient peer to create files in arbitrary file system locations, and to read arbitrary files. This allows peers to steal...

CVE-2025-60020

nncp before 8.12.0 allows path traversal for reading or writing during freqing and file saving via a crafted path in packet data...

PT-2025-55107

Уязвимость системы контроля доступа PERCo-Web связана с раскрытием информации посредством чтения файлов каталога. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к защищаемой информации...

H2O affected by a deserialization vulnerability

A deserialization vulnerability exists in h2oai/h2o-3 versions = 3.46.0.7, allowing attackers to read arbitrary system files and execute arbitrary code. The vulnerability arises from improper handling of JDBC connection parameters, which can be exploited by bypassing regular expression checks and...

CVE-2025-59352

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the gRPC API and HTTP APIs allow peers to send requests that force the recipient peer to create files in arbitrary file system locations, and to read arbitrary files. This allows peers to steal...