EUVD-2025-19574

Malicious code in bioql PyPI...

EUVD-2022-47128

Malicious code in bioql PyPI...

EUVD-2025-25433

Malicious code in bioql PyPI...

EUVD-2021-32479

Malicious code in bioql PyPI...

EUVD-2024-51998

Malicious code in bioql PyPI...

EUVD-2023-40243

Malicious code in bioql PyPI...

EUVD-2023-37435

Malicious code in bioql PyPI...

EUVD-2022-30747

Malicious code in bioql PyPI...

EUVD-2022-36089

Malicious code in bioql PyPI...

EUVD-2022-53327

Malicious code in bioql PyPI...

mysql-selinux and mysql8.4 security update

An update is available for mysql8.4, mysql-selinux. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list MySQL is a multi-user, multi-threaded SQL database server...

ALSA-2025:16861 Moderate: mysql:8.0 security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. Security Fixes: mysql: mysqldump unspecified vulnerability CPU Apr 2025 CVE-2025-30722 mysql: Optimizer unspecified vulnerability CPU Apr 2025...

Exposure of Information Through Directory Listing

Overview @mastra/mcp-docs-server is a MCP server for accessing Mastra.ai documentation, changelogs, and news. Affected versions of this package are vulnerable to Exposure of Information Through Directory Listing via the execute function. An attacker can access sensitive directory listings by...

The vulnerability of the mp function in Microprogrammed Software Routers of EDIMAX N300 allows a hacker to execute arbitrary code.

The vulnerability of the mp function in Microprogrammed Software Routers of EDIMAX N300 is related to the lack of measures taken for data cleaning at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the main() function in TOTOLINK EX1200T microcontroller-based routers allows a hacker to execute arbitrary commands.

The vulnerability of the main function in TOTOLINK EX1200T microcontroller-based routers lies in the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Moderate: mysql:8.4 security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. Security Fixes: openssl: Timing side-channel in ECDSA signature computation CVE-2024-13176 mysql: mysqldump unspecified vulnerability CPU Apr 2025...

The vulnerability of the xmlNodeSetName() function in the PHP programming language allows a hacker to trigger a service failure.

The vulnerability of the xmlNodeSetName function in the PHP programming language is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-30064 Possibility to generate a session for any user via the "ex:action" parameter after obtaining access to the JWT key

An insufficiently secured internal function allows session generation for arbitrary users. The decodeParam function checks the JWT but does not verify which signing algorithm was used. As a result, an attacker can use the "ex:action" parameter in the VerifyUserByThrustedService function to genera...

PT-2025-34858 · Unknown · Verifyuserbythrustedservice

Name of the Vulnerable Software and Affected Versions: versions prior to 2.3 Description: An insufficiently secured internal function allows session generation for arbitrary users. The decodeParam function checks the JWT but does not verify which signing algorithm was used. An attacker can use th...

CVE-2025-8611

AOMEI Cyber Backup Missing Authentication for Critical Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of AOMEI Cyber Backup. Authentication is not required to exploit this vulnerability. The specific fla...