1122 matches found
EUVD-2025-3073
Malicious code in bioql PyPI...
EUVD-2021-34152
Malicious code in bioql PyPI...
EUVD-2022-39530
Malicious code in bioql PyPI...
EUVD-2024-0557
Malicious code in bioql PyPI...
EUVD-2022-0817
Malicious code in bioql PyPI...
EUVD-2025-21920
Malicious code in bioql PyPI...
EUVD-2022-25003
Malicious code in bioql PyPI...
EUVD-2023-46317
Malicious code in bioql PyPI...
EUVD-2022-3339
Malicious code in bioql PyPI...
EUVD-2024-54295
Malicious code in bioql PyPI...
EUVD-2023-34415
Malicious code in bioql PyPI...
CVE-2025-10244
A maliciously crafted HTML payload, when rendered by the Autodesk Fusion desktop application, can trigger a Stored Cross-site Scripting XSS vulnerability. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the context of the current process...
CVE-2025-10244
A maliciously crafted HTML payload, when rendered by the Autodesk Fusion desktop application, can trigger a Stored Cross-site Scripting XSS vulnerability. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the context of the current process...
CVE-2025-10244 HTML Payload Stored Cross-Site Scripting (XSS) Vulnerability
A maliciously crafted HTML payload, when rendered by the Autodesk Fusion desktop application, can trigger a Stored Cross-site Scripting XSS vulnerability. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the context of the current process...
CVE-2025-10244
CVE-2025-10244 affects Autodesk Fusion desktop app via a Stored Cross-site Scripting (XSS) condition triggered by a malicious HTML payload rendered by the application. The vulnerability can allow reading local files or executing arbitrary code in the context of the current process. Reported CVSSv...
PT-2025-39164
Name of the Vulnerable Software and Affected Versions Autodesk Fusion desktop app affected versions not specified Description A specially crafted HTML payload, when processed by the application, can lead to a Stored Cross-site Scripting XSS condition. Successful exploitation may allow a malicious...
CVE-2025-59340 jinjava Sandbox Bypass via JavaType-Based Deserialization
jinjava is a Java-based template engine based on django template syntax, adapted to render jinja templates. Priori to 2.8.1, by using mapper.getTypeFactory.constructFromCanonical, it is possible to instruct the underlying ObjectMapper to deserialize attacker-controlled input into arbitrary classe...
CVE-2025-59340 jinjava Sandbox Bypass via JavaType-Based Deserialization
jinjava is a Java-based template engine based on django template syntax, adapted to render jinja templates. Priori to 2.8.1, by using mapper.getTypeFactory.constructFromCanonical, it is possible to instruct the underlying ObjectMapper to deserialize attacker-controlled input into arbitrary classe...
PT-2025-38270
Name of the Vulnerable Software and Affected Versions jinjava versions prior to 2.8.1 Description jinjava is a Java-based template engine. A sandbox escape flaw exists due to unrestricted interaction with the properties of JinjavaInterpreter instances, specifically through the ObjectMapper. By...