EUVD-2022-0871

Malicious code in bioql PyPI...

EUVD-2021-32947

Malicious code in bioql PyPI...

EUVD-2022-37395

Malicious code in bioql PyPI...

EUVD-2024-44585

Malicious code in bioql PyPI...

EUVD-2023-41789

Malicious code in bioql PyPI...

EUVD-2023-31647

Malicious code in bioql PyPI...

EUVD-2023-38419

Malicious code in bioql PyPI...

EUVD-2025-19165

Malicious code in bioql PyPI...

EUVD-2025-24556

Malicious code in bioql PyPI...

EUVD-2022-28515

Malicious code in bioql PyPI...

EUVD-2023-38225

Malicious code in bioql PyPI...

EUVD-2023-41194

Malicious code in bioql PyPI...

EUVD-2025-6589

Malicious code in bioql PyPI...

EUVD-2025-24229

Malicious code in bioql PyPI...

EUVD-2025-5053

Malicious code in bioql PyPI...

EUVD-2022-37810

Malicious code in bioql PyPI...

PT-2025-40349

Name of the Vulnerable Software and Affected Versions TRUfusion Enterprise versions through 7.10.4.0 Description The application uses a static key to encrypt the COOKIEID, which serves as an authentication mechanism for certain endpoints, such as /trufusionPortal/getProjectList. This allows for t...

CVE-2025-8625 Copypress Rest API 1.1 - 1.2 - Missing Configurable JWT Secret and File-Type Validation to Unauthenticated Remote Code Execution

The Copypress Rest API plugin for WordPress is vulnerable to Remote Code Execution via copyreaphandleimage Function in versions 1.1 to 1.2. The plugin falls back to a hard-coded JWT signing key when no secret is defined and does not restrict which file types can be fetched and saved as attachment...

WordPress plugin Copypress Rest API 安全漏洞

WordPress Copypress Rest API plugin plugin is used to extend the functionality of WordPress plugin , by providing a RESTful interface to achieve data interaction . A code execution vulnerability exists in the WordPress Copypress Rest API plugin, which stems from the use of a hard-coded JWT signin...

Vasion Print Virtual Appliance Host 安全漏洞

Vasion Print Virtual Appliance Host is a print management software from Vasion USA. A security vulnerability exists in Vasion Print Virtual Appliance Host versions prior to 25.1.102, which stems from a hard-coded private key stored in a plaintext file, which could lead to the disclosure of the...