EUVD-2024-33349

Malicious code in bioql PyPI...

EUVD-2025-6589

Malicious code in bioql PyPI...

EUVD-2025-25832

Malicious code in bioql PyPI...

EUVD-2025-31697

Malicious code in bioql PyPI...

EUVD-2025-19891

Malicious code in bioql PyPI...

EUVD-2025-19894

Malicious code in bioql PyPI...

EUVD-2023-41194

Malicious code in bioql PyPI...

EUVD-2023-41789

Malicious code in bioql PyPI...

EUVD-2022-28515

Malicious code in bioql PyPI...

EUVD-2024-34482

Malicious code in bioql PyPI...

EUVD-2025-6371

Malicious code in bioql PyPI...

EUVD-2024-52266

Malicious code in bioql PyPI...

EUVD-2022-39374

Malicious code in bioql PyPI...

EUVD-2022-37395

Malicious code in bioql PyPI...

EUVD-2023-38419

Malicious code in bioql PyPI...

EUVD-2025-24556

Malicious code in bioql PyPI...

EUVD-2025-15075

Malicious code in bioql PyPI...

EUVD-2022-37810

Malicious code in bioql PyPI...

PT-2025-40349

Name of the Vulnerable Software and Affected Versions TRUfusion Enterprise versions through 7.10.4.0 Description The application uses a static key to encrypt the COOKIEID, which serves as an authentication mechanism for certain endpoints, such as /trufusionPortal/getProjectList. This allows for t...

CVE-2025-8625 Copypress Rest API 1.1 - 1.2 - Missing Configurable JWT Secret and File-Type Validation to Unauthenticated Remote Code Execution

The Copypress Rest API plugin for WordPress is vulnerable to Remote Code Execution via copyreaphandleimage Function in versions 1.1 to 1.2. The plugin falls back to a hard-coded JWT signing key when no secret is defined and does not restrict which file types can be fetched and saved as attachment...