EUVD-2023-35198

Malicious code in bioql PyPI...

EUVD-2022-5377

Malicious code in bioql PyPI...

EUVD-2022-2304

Malicious code in bioql PyPI...

EUVD-2025-7207

Malicious code in bioql PyPI...

EUVD-2025-27774

Malicious code in bioql PyPI...

EUVD-2025-22316

Malicious code in bioql PyPI...

EUVD-2023-2786

Malicious code in bioql PyPI...

EUVD-2024-2736

Malicious code in bioql PyPI...

EUVD-2023-2662

Malicious code in bioql PyPI...

EUVD-2022-0213

Malicious code in bioql PyPI...

EUVD-2022-39374

Malicious code in bioql PyPI...

EUVD-2024-33919

Malicious code in bioql PyPI...

EUVD-2024-34482

Malicious code in bioql PyPI...

EUVD-2024-0785

Malicious code in bioql PyPI...

EUVD-2025-18201

Malicious code in bioql PyPI...

EUVD-2025-6371

Malicious code in bioql PyPI...

EUVD-2024-48644

Malicious code in bioql PyPI...

opentelemetry-collector security update

An update is available for opentelemetry-collector. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Collector with the supported components for a Rocky Enterpri...

Exploit for CVE-2025-8625

CVE-2025-8625 Copypress Rest API 1.1 - 1.2 - Missing Configura...

CVE-2025-8625 Copypress Rest API 1.1 - 1.2 - Missing Configurable JWT Secret and File-Type Validation to Unauthenticated Remote Code Execution

The Copypress Rest API plugin for WordPress is vulnerable to Remote Code Execution via copyreaphandleimage Function in versions 1.1 to 1.2. The plugin falls back to a hard-coded JWT signing key when no secret is defined and does not restrict which file types can be fetched and saved as attachment...