CVE-2025-10695

Two unauthenticated diagnostic endpoints allow arbitrary backend-initiated network connections to an attacker‑supplied destination. Both endpoints are exposed with permission = 'any', enabling unauthenticated SSRF for internal network scanning and service interaction. This issue affects...

EUVD-2022-2234

Malicious code in bioql PyPI...

EUVD-2024-0189

Malicious code in bioql PyPI...

EUVD-2025-7033

Malicious code in bioql PyPI...

EUVD-2024-0191

Malicious code in bioql PyPI...

EUVD-2025-28246

Malicious code in bioql PyPI...

EUVD-2025-27460

Malicious code in bioql PyPI...

EUVD-2025-7044

Malicious code in bioql PyPI...

EUVD-2025-6006

Malicious code in bioql PyPI...

EUVD-2024-47164

Malicious code in bioql PyPI...

EUVD-2025-6785

Malicious code in bioql PyPI...

EUVD-2022-44031

Malicious code in bioql PyPI...

EUVD-2022-34542

Malicious code in bioql PyPI...

EUVD-2023-31628

Malicious code in bioql PyPI...

EUVD-2025-29214

Malicious code in bioql PyPI...

EUVD-2024-39200

Malicious code in bioql PyPI...

EUVD-2025-28736

Malicious code in bioql PyPI...

CVE-2025-34232

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 VA/SaaS deployments contain a blind server-side request forgery SSRF vulnerability reachable via the /var/www/app/consolerelease/lexmark/dellCheck.php script that can be...

CVE-2025-34228 Vasion Print (formerly PrinterLogic) SSRF via Lexmark update.php

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 VA/SaaS deployments contain a server-side request forgery SSRF vulnerability. The /var/www/app/consolerelease/lexmark/update.php script is reachable from the internet...

CVE-2025-34229

Vulsion: Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to 25.1.102 and Application prior to 25.1.1413 contain a blind SSRF via /var/www/app/console_release/hp/installApp.php. An unauthenticated attacker can cause the system to request internal host addresses (built as http://:...