EUVD-2022-15744

Malicious code in bioql PyPI...

EUVD-2025-30902

Malicious code in bioql PyPI...

EUVD-2025-19847

Malicious code in bioql PyPI...

EUVD-2022-41389

Malicious code in bioql PyPI...

EUVD-2022-39291

Malicious code in bioql PyPI...

EUVD-2022-34199

Malicious code in bioql PyPI...

EUVD-2022-52359

Malicious code in bioql PyPI...

EUVD-2022-52356

Malicious code in bioql PyPI...

EUVD-2022-52358

Malicious code in bioql PyPI...

EUVD-2022-52357

Malicious code in bioql PyPI...

EUVD-2025-22705

Malicious code in bioql PyPI...

EUVD-2022-46631

Malicious code in bioql PyPI...

EUVD-2017-7139

Malicious code in bioql PyPI...

EUVD-2022-5409

Malicious code in bioql PyPI...

httpd security update

An update is available for httpd. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The httpd packages provide the Apache HTTP Server, a powerful, efficient, and...

The vulnerability of the Service Discovery Management Pack (SDMP) function in the monitoring tool for VMware Aria Operations and the VMware Tools suite allows a perpetrator to elevate their privileges to the root level.

The vulnerability of the Service Discovery Management Pack SDMP function in the VMware Aria Operations virtual infrastructure monitoring tool and the VMware Tools utility set is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to elevate their...

AlmaLinux 9 : httpd (ALSA-2025:15023)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:15023 advisory. httpd: insufficient escaping of user-supplied data in modssl CVE-2024-47252 httpd: modssl: access control bypass by trusted clients is possible using TLS...

httpd: CONTINUATION frames DoS

A vulnerability was found in how Apache httpd implements the HTTP/2 protocol. There are insufficient limitations placed on the amount of CONTINUATION frames that can be sent within a single stream. This issue could allow an unauthenticated remote attacker to send packets to vulnerable servers,...

CVE-2025-57639: Improper Neutralization of Special Elements used in an OS Command

OS Command injection vulnerability in Tenda AC9 1.0 was discovered to contain a command injection vulnerability via the usb.samba.guest.user parameter in the formSetSambaConf function of the httpd file...

VulnCheck KEV: CVE-2025-7414

A vulnerability classified as critical was found in Tenda O3V2 1.0.0.123880. This vulnerability affects the function fromNetToolGet of the file /goform/setPingInfo of the component httpd. The manipulation of the argument domain leads to os command injection. The attack can be initiated remotely...