EUVD-2022-50393

Malicious code in bioql PyPI...

EUVD-2022-6375

Malicious code in bioql PyPI...

EUVD-2022-2616

Malicious code in bioql PyPI...

EUVD-2025-17600

Malicious code in bioql PyPI...

EUVD-2022-7182

Malicious code in bioql PyPI...

EUVD-2024-52330

Malicious code in bioql PyPI...

EUVD-2024-34988

Malicious code in bioql PyPI...

EUVD-2024-38118

Malicious code in bioql PyPI...

EUVD-2022-7353

Malicious code in bioql PyPI...

EUVD-2022-6406

Malicious code in bioql PyPI...

EUVD-2022-6392

Malicious code in bioql PyPI...

EUVD-2022-7024

Malicious code in bioql PyPI...

CVE-2025-59346

Dragonfly is an open source P2P-based file distribution and image acceleration system. Versions prior to 2.1.0 contain a server-side request forgery SSRF vulnerability that enables users to force DragonFly2’s components to make requests to internal services that are otherwise not accessible to...

CVE-2025-59346: Server-Side Request Forgery (SSRF)

Dragonfly is an open source P2P-based file distribution and image acceleration system. Versions prior to 2.1.0 contain a server-side request forgery SSRF vulnerability that enables users to force DragonFly2’s components to make requests to internal services that are otherwise not accessible to...

CVE-2025-42988

Under certain conditions, SAP Business Objects Business Intelligence Platform allows an unauthenticated attacker to enumerate HTTP endpoints in the internal network by specially crafting HTTP requests. This disclosure of information could further enable the researcher to cause SSRF. It has no...

CVE-2025-42988

Under certain conditions, SAP Business Objects Business Intelligence Platform allows an unauthenticated attacker to enumerate HTTP endpoints in the internal network by specially crafting HTTP requests. This disclosure of information could further enable the researcher to cause SSRF. It has no...

PT-2025-24590

Name of the Vulnerable Software and Affected Versions SAP Business Objects Business Intelligence Platform affected versions not specified Description The issue allows an unauthenticated attacker to enumerate HTTP endpoints in the internal network by manipulating specific HTTP requests. This...

CVE-2024-28155

Jenkins AppSpider Plugin 1.0.16 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to obtain information about available scan config names, engine group names, and client names...

CVE-2023-49785

NextChat, also known as ChatGPT-Next-Web, is a cross-platform chat user interface for use with ChatGPT. Versions 2.11.2 and prior are vulnerable to server-side request forgery and cross-site scripting. This vulnerability enables read access to internal HTTP endpoints but also write access using...

CVE-2022-28144

Jenkins Proxmox Plugin 0.7.0 and earlier does not perform a permission check in several HTTP endpoints, allowing attackers with Overall/Read permission to connect to an attacker-specified host using attacker-specified username and password perform a connection test, disable SSL/TLS validation for...