EUVD-2025-28858

Malicious code in bioql PyPI...

EUVD-2025-24954

Malicious code in bioql PyPI...

EUVD-2024-1934

Malicious code in bioql PyPI...

EUVD-2025-26302

Malicious code in bioql PyPI...

EUVD-2025-26225

Malicious code in bioql PyPI...

EUVD-2022-7737

Malicious code in bioql PyPI...

EUVD-2024-51169

Malicious code in bioql PyPI...

EUVD-2025-12133

Malicious code in bioql PyPI...

EUVD-2025-20783

Malicious code in bioql PyPI...

EUVD-2025-25152

Malicious code in bioql PyPI...

EUVD-2025-24686

Malicious code in bioql PyPI...

EUVD-2025-0065

Malicious code in bioql PyPI...

EUVD-2025-21413

Malicious code in bioql PyPI...

EUVD-2025-26224

Malicious code in bioql PyPI...

perl security update

An update is available for perl. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Perl is a high-level programming language that is commonly used for system...

CVE-2025-60445

A stored Cross-Site Scripting XSS vulnerability has been discovered in XunRuiCMS version 4.7.1. The vulnerability exists due to insufficient validation of SVG file uploads in the dayrui/Fcms/Library/Upload.php component, allowing attackers to inject malicious JavaScript code that executes when th...

MeteoBridge template.cgi command injection

Added: 10/03/2025 CVE: CVE-2025-4008 Background MeteoBridge is a device which connects personal weather stations to public weather networks. Problem A command injection vulnerability in the MeteoBridge web interface could allow remote, unauthenticated attackers to execute arbitrary commands by...

Directory Traversal

Overview strands-agents is an A model-driven approach to building AI agents in just a few lines of code Affected versions of this package are vulnerable to Directory Traversal via the FileSessionManager.getsessionpath, FileSessionManager.getagentpath, S3SessionManager.getsessionpath, and...

AndSoft e-TMS 跨站脚本漏洞

AndSoft e-TMS is a logistics management software from the Spanish company AndSoft. A cross-site scripting vulnerability exists in AndSoft e-TMS v25.03, which stems from insufficient validation of parameters l, demo, demo2, TNTLOGIN, UO, and SuppConn in the file /clt/LOGINFRMDLG.ASP, which could...

Auth0 Wordpress plugin Does Not Properly Handle File Types in Bulk User Import

Overview In applications built with the Auth0-PHP SDK, the Bulk User Import endpoint does not validate the file path wrapper or value. Without proper validation, affected applications may accept arbitrary file paths or URLs. Am I affected? You are affected by this vulnerability if you meet the...