EUVD-2025-25272

Malicious code in bioql PyPI...

EUVD-2025-25370

Malicious code in bioql PyPI...

EUVD-2025-25287

Malicious code in bioql PyPI...

EUVD-2025-24000

Malicious code in bioql PyPI...

EUVD-2025-31565

Malicious code in bioql PyPI...

EUVD-2025-27198

Malicious code in bioql PyPI...

EUVD-2023-49876

Malicious code in bioql PyPI...

EUVD-2025-32091

Malicious code in bioql PyPI...

EUVD-2022-25900

Malicious code in bioql PyPI...

EUVD-2025-24575

Malicious code in bioql PyPI...

EUVD-2025-24560

Malicious code in bioql PyPI...

EUVD-2025-25335

Malicious code in bioql PyPI...

EUVD-2025-27108

Malicious code in bioql PyPI...

PT-2025-40573

Name of the Vulnerable Software and Affected Versions HCL MyXalytics version 6.6 Description A flaw exists in HCL MyXalytics that permits HTML injection. This could potentially allow an attacker to inject malicious HTML code into the application. Recommendations At the moment, there is no...

CVE-2025-61604 WeGIA: Cross-Site Request Forgery (CSRF) Vulnerability in `control.php` Endpoint

WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain a Cross-Site Request Forgery CSRF vulnerability. The delete operation for the Almoxarifado entity is exposed via HTTP GET without CSRF protection, allowing a third-party site to trigger...

netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions

A flaw in Netty’s HTTP/1.1 chunked encoding parser allows newline LF characters in chunk extensions to be incorrectly treated as the end of the chunk-size line instead of requiring the proper CRLF sequence. This discrepancy can be exploited in rare cases where a reverse proxy interprets the same...

netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability

A flaw was found in Netty where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the "MadeYouReset" attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts...

netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability

A flaw was found in Netty where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the "MadeYouReset" attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts...

TLoRa: Implementing TLS over LoRa for Secure HTTP Communication in IoT

We present TLoRa, an end-to-end architecture for HTTPS communication over LoRa by integrating TCP tunneling and a complete TLS 1.3 handshake. It enables a seamless and secure communication channel between WiFi-enabled end devices and the Internet over LoRa using an End Hub EH and a Net Relay NR...

ROS-20251002-03

A vulnerability in Microsoft's .NET software platform is related to the closing of the HTTP/3 stream while writing code for an application, resulting in a race condition in response. Exploitation of the vulnerability could allow an attacker, acting remotely, to gain access to sensitive informatio...