EUVD-2022-30350

Malicious code in bioql PyPI...

EUVD-2022-36332

Malicious code in bioql PyPI...

EUVD-2021-7403

Malicious code in bioql PyPI...

EUVD-2023-24337

Malicious code in bioql PyPI...

EUVD-2025-12104

Malicious code in bioql PyPI...

EUVD-2022-51935

Malicious code in bioql PyPI...

EUVD-2022-24970

Malicious code in bioql PyPI...

EUVD-2023-46463

Malicious code in bioql PyPI...

EUVD-2025-27447

Malicious code in bioql PyPI...

EUVD-2025-17441

Malicious code in bioql PyPI...

EUVD-2022-36299

Malicious code in bioql PyPI...

EUVD-2023-24436

Malicious code in bioql PyPI...

EUVD-2022-35160

Malicious code in bioql PyPI...

EUVD-2022-52541

Malicious code in bioql PyPI...

EUVD-2021-6681

Malicious code in bioql PyPI...

Improper Validation of Function Hook Arguments

Overview Affected versions of this package are vulnerable to Improper Validation of Function Hook Arguments in the /api/webhook endpoint via the affectedRevisionInfo function. An attacker can cause the server process to crash and disrupt service availability by sending a Gogs push event whose JSO...

Path Traversal

org.opencastproject, opencast-user-interface-configuration is vulnerable to path traversal. The vulnerability is due to insufficient protections in the UI config module where the path is checked without validating the file separator, which allows an attacker to access files within other folders...

CVE-2025-58317 File Parsing Memory Corruption in CNCSoft-G2

Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process...

CVE-2025-10412

The Product Options and Price Calculation Formulas for WooCommerce – Uni CPO Premium plugin for WordPress is vulnerable to arbitrary file uploads due to misconfigured file type validation in the 'unicpouploadfile' function in all versions up to, and including, 4.9.55. This makes it possible for...

CVE-2025-36202 IBM webMethods Integration code execution

IBM webMethods Integration 10.15 and 11.1 could allow an authenticated user with required execute Services to execute commands on the system due to the improper validation of format string strings passed as an argument from an external source...