EUVD-2024-29054

Malicious code in bioql PyPI...

EUVD-2023-31108

Malicious code in bioql PyPI...

EUVD-2023-31616

Malicious code in bioql PyPI...

EUVD-2024-41261

Malicious code in bioql PyPI...

EUVD-2024-27216

Malicious code in bioql PyPI...

EUVD-2024-20955

Malicious code in bioql PyPI...

EUVD-2024-52946

Malicious code in bioql PyPI...

EUVD-2024-23208

Malicious code in bioql PyPI...

EUVD-2024-30507

Malicious code in bioql PyPI...

EUVD-2024-32778

Malicious code in bioql PyPI...

EUVD-2024-37611

Malicious code in bioql PyPI...

EUVD-2023-45229

Malicious code in bioql PyPI...

EUVD-2024-47308

Malicious code in bioql PyPI...

EUVD-2024-46386

Malicious code in bioql PyPI...

EUVD-2024-32753

Malicious code in bioql PyPI...

UBUNTU-CVE-2025-39921

In the Linux kernel, the following vulnerability has been resolved: spi: microchip-core-qspi: stop checking viability of op-maxfreq in supportsop callback In commit 13529647743d9 "spi: microchip-core-qspi: Support per spi-mem operation frequency switches" the logic for checking the viability of...

Arbitrary Code Injection

Craft CMS is vulnerable to Arbitrary Code Injection. The vulnerability is due to inadequate protection of restore functionality because, with a compromised security key and the ability to place an arbitrary file in storage/backups, an attacker can craft a request to /updater/restore-db that...

CVE-2025-8121: Improper Neutralization of Special Elements used in an SQL Command

Improper neutralization of input provided by an authorized user in article positioning functionality allows for Blind SQL Injection attacks. This issue affects all 3 templates: www, bip and ww+bip. This product is End-Of-Life and producent will not publish patches for this vulnerability...

CVE-2025-6724

In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in multiple services via improperly neutralized inputs used in an SQL command...

CVE-2025-6724

In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in multiple services via improperly neutralized inputs used in an SQL command...