CVE-2024-41737

SAP CRM ABAP Insights Management allows an authenticated attacker to enumerate HTTP endpoints in the internal network by specially crafting HTTP requests. On successful exploitation this can result in information disclosure. It has no impact on integrity and availability of the application...

Use of Hard-coded Cryptographic Key

Overview arcade-mcp is an Arcade.dev - Tool Calling platform for Agents Affected versions of this package are vulnerable to Use of Hard-coded Cryptographic Key via the HTTP server uses a hardcoded default worker secret "dev" that is never validated or overridden during normal server startup. An...

EUVD-2021-1334

Malware in sbrugna...

EUVD-2019-0016

Malware in sbrugna...

EUVD-2022-50393

Malicious code in bioql PyPI...

EUVD-2022-7353

Malicious code in bioql PyPI...

EUVD-2022-6406

Malicious code in bioql PyPI...

EUVD-2022-6392

Malicious code in bioql PyPI...

EUVD-2022-2616

Malicious code in bioql PyPI...

EUVD-2024-34988

Malicious code in bioql PyPI...

EUVD-2022-7182

Malicious code in bioql PyPI...

EUVD-2022-7024

Malicious code in bioql PyPI...

EUVD-2024-52330

Malicious code in bioql PyPI...

EUVD-2022-6375

Malicious code in bioql PyPI...

EUVD-2025-17600

Malicious code in bioql PyPI...

EUVD-2024-38118

Malicious code in bioql PyPI...

CVE-2025-59346

Dragonfly is an open source P2P-based file distribution and image acceleration system. Versions prior to 2.1.0 contain a server-side request forgery SSRF vulnerability that enables users to force DragonFly2’s components to make requests to internal services that are otherwise not accessible to...

CVE-2025-59346: Server-Side Request Forgery (SSRF)

Dragonfly is an open source P2P-based file distribution and image acceleration system. Versions prior to 2.1.0 contain a server-side request forgery SSRF vulnerability that enables users to force DragonFly2’s components to make requests to internal services that are otherwise not accessible to...

CVE-2025-42988

Under certain conditions, SAP Business Objects Business Intelligence Platform allows an unauthenticated attacker to enumerate HTTP endpoints in the internal network by specially crafting HTTP requests. This disclosure of information could further enable the researcher to cause SSRF. It has no...

CVE-2025-42988

Under certain conditions, SAP Business Objects Business Intelligence Platform allows an unauthenticated attacker to enumerate HTTP endpoints in the internal network by specially crafting HTTP requests. This disclosure of information could further enable the researcher to cause SSRF. It has no...