EUVD-2024-47527

Malicious code in bioql PyPI...

EUVD-2023-58231

Malicious code in bioql PyPI...

EUVD-2024-34950

Malicious code in bioql PyPI...

EUVD-2022-28988

Malicious code in bioql PyPI...

EUVD-2025-4545

Malicious code in bioql PyPI...

EUVD-2023-1112

Malicious code in bioql PyPI...

EUVD-2022-7655

Malicious code in bioql PyPI...

EUVD-2025-25333

Malicious code in bioql PyPI...

EUVD-2025-6141

Malicious code in bioql PyPI...

EUVD-2024-43123

Malicious code in bioql PyPI...

EUVD-2021-7264

Malicious code in bioql PyPI...

EUVD-2024-27392

Malicious code in bioql PyPI...

EUVD-2024-52714

Malicious code in bioql PyPI...

EUVD-2023-36981

Malicious code in bioql PyPI...

EUVD-2022-34502

Malicious code in bioql PyPI...

SUSE CVE-2025-54287

Template Injection in instance snapshot creation component in Canonical LXD = 4.0 allows an attacker with instance configuration permissions to read arbitrary files on the host system via specially crafted snapshot pattern templates using the Pongo2 template engine...

GHSA-P86W-W5RH-M3HX Apache Kylin Files or Directories Accessible to External Parties

Files or Directories Accessible to External Parties vulnerability in Apache Kylin. You are fine as long as the Kylin's system and project admin access is well protected. This issue affects Apache Kylin: from 4.0.0 through 5.0.2. Users are recommended to upgrade to version 5.0.3, which fixes the...

CVE-2025-10719

CVE-2025-10719 concerns WisdomGarden’s Tronclass LMS, where an Insecure Direct Object Reference flaw lets remote attackers with regular privileges manipulate a parameter to access other users’ files. Root cause appears to be improper authorization on object references. Public summaries in NVD/Red...

Dragonfly 安全漏洞

Dragonfly is an open source framework from DragonflyDB that allows dynamic processing of any content type. A security vulnerability exists in Dragonfly versions prior to 2.1.0 that stems from a gRPC API and HTTP API that allows a peer node to send a request to force a receiving node to create a...

CVE-2025-58753

Copyparty is a portable file server. In versions prior to 1.19.8, there was a missing permission-check in the shares feature the shr global-option. When a share was created for just one file inside a folder, it was possible to access the other files inside that folder by guessing the filenames. I...