705 matches found
EUVD-2024-49456
Malicious code in bioql PyPI...
EUVD-2021-28593
Malicious code in bioql PyPI...
EUVD-2025-22086
Malicious code in bioql PyPI...
EUVD-2022-1458
Malicious code in bioql PyPI...
EUVD-2023-32731
Malicious code in bioql PyPI...
EUVD-2025-29486
Malicious code in bioql PyPI...
EUVD-2022-28106
Malicious code in bioql PyPI...
EUVD-2022-26005
Malicious code in bioql PyPI...
EUVD-2024-50846
Malicious code in bioql PyPI...
EUVD-2023-27524
Malicious code in bioql PyPI...
CVE-2025-60020
nncp before 8.12.0 allows path traversal for reading or writing during freqing and file saving via a crafted path in packet data...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal via improper validation of the import directory path configuration. An attacker can execute arbitrary code by uploading a malicious plugin to the prepackaged plugins directory. This is only exploitable if the attacke...
Directory Traversal
Overview flowise-components is a Flowiseai Components Affected versions of this package are vulnerable to Directory Traversal via improper validation of the chatId parameter in the file access process. An attacker can access sensitive files on the server filesystem, including database files...
PT-2025-36651
Soft Serve vulnerable to arbitrary file writing through SSH API in github.com/charmbracelet/soft-serve...
CVE-2025-58355 Soft Serve is vulnerable to arbitrary file writing through its SSH API
Soft Serve is a self-hostable Git server for the command line. In versions 0.9.1 and below, attackers can create or override arbitrary files with uncontrolled data through its SSH API. This issue is fixed in version 0.10.0...
CVE-2025-58355 Soft Serve is vulnerable to arbitrary file writing through its SSH API
Soft Serve is a self-hostable Git server for the command line. In versions 0.9.1 and below, attackers can create or override arbitrary files with uncontrolled data through its SSH API. This issue is fixed in version 0.10.0...
CLSA-2025-1755791979 krb5: Fix of CVE-2025-24528
CVE-2025-24528: fix buffer overflow vulnerability in iprop log file writing...
GO-2025-3800 eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper
eKuiper /config/uploads API arbitrary file writing may lead to RCE in github.com/lf-edge/ekuiper...
CVE-2025-51463
Path Traversal in restorerunbackup in AIM 3.28.0 allows remote attackers to write arbitrary files to the server's filesystem via a crafted backup tar file submitted to the runinstruction API, which is extracted without path validation during restoration...
AlmaLinux 9 : git (ALSA-2025:11462)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:11462 advisory. git: Git does not sanitize URLs when asking for credentials interactively CVE-2024-50349 git: Newline confusion in credential helpers can lead to...