EUVD-2023-54407

Malicious code in bioql PyPI...

EUVD-2022-49126

Malicious code in bioql PyPI...

EUVD-2024-27392

Malicious code in bioql PyPI...

EUVD-2024-52714

Malicious code in bioql PyPI...

EUVD-2025-7678

Malicious code in bioql PyPI...

EUVD-2022-34502

Malicious code in bioql PyPI...

EUVD-2025-4545

Malicious code in bioql PyPI...

EUVD-2024-34950

Malicious code in bioql PyPI...

EUVD-2025-25333

Malicious code in bioql PyPI...

EUVD-2023-36981

Malicious code in bioql PyPI...

EUVD-2021-9291

Malicious code in bioql PyPI...

EUVD-2025-24215

Malicious code in bioql PyPI...

EUVD-2021-7264

Malicious code in bioql PyPI...

SUSE CVE-2025-54287

Template Injection in instance snapshot creation component in Canonical LXD = 4.0 allows an attacker with instance configuration permissions to read arbitrary files on the host system via specially crafted snapshot pattern templates using the Pongo2 template engine...

GHSA-P86W-W5RH-M3HX Apache Kylin Files or Directories Accessible to External Parties

Files or Directories Accessible to External Parties vulnerability in Apache Kylin. You are fine as long as the Kylin's system and project admin access is well protected. This issue affects Apache Kylin: from 4.0.0 through 5.0.2. Users are recommended to upgrade to version 5.0.3, which fixes the...

CVE-2025-10719

CVE-2025-10719 concerns WisdomGarden’s Tronclass LMS, where an Insecure Direct Object Reference flaw lets remote attackers with regular privileges manipulate a parameter to access other users’ files. Root cause appears to be improper authorization on object references. Public summaries in NVD/Red...

Dragonfly 安全漏洞

Dragonfly is an open source framework from DragonflyDB that allows dynamic processing of any content type. A security vulnerability exists in Dragonfly versions prior to 2.1.0 that stems from a gRPC API and HTTP API that allows a peer node to send a request to force a receiving node to create a...

CVE-2025-58753

Copyparty is a portable file server. In versions prior to 1.19.8, there was a missing permission-check in the shares feature the shr global-option. When a share was created for just one file inside a folder, it was possible to access the other files inside that folder by guessing the filenames. I...

CVE-2025-42926

SAP NetWeaver Application Server Java does not perform an authentication check when an attacker attempts to access internal files within the web application.Upon successfully exploitation, an unauthenticated attacker could access these files to gather additional sensitive information about the...

CVE-2025-42926

CVE-2025-42926 concerns SAP NetWeaver Application Server Java. The issue is a missing authentication check that could let an unauthenticated attacker access internal web-app files via network access. Per the sources, the impact is limited to confidentiality (low), with no stated effects on integr...