EUVD-2019-15270

Malware in sbrugna...

EUVD-2022-45952

Malicious code in bioql PyPI...

EUVD-2023-56990

Malicious code in bioql PyPI...

EUVD-2023-56358

Malicious code in bioql PyPI...

EUVD-2022-34599

Malicious code in bioql PyPI...

EUVD-2025-16104

Malicious code in bioql PyPI...

EUVD-2023-56356

Malicious code in bioql PyPI...

EUVD-2022-52446

Malicious code in bioql PyPI...

EUVD-2024-48780

Malicious code in bioql PyPI...

EUVD-2025-6877

Malicious code in bioql PyPI...

EUVD-2022-49519

Malicious code in bioql PyPI...

marimo vulnerable to proxy abuse of /mpl/{port}/

Summary The /mpl// endpoint, which is accessible without authentication on default Marimo installations allows for external attackers to reach internal services and arbitrary ports. Details From our understanding, this route is used internally to provide access to interactive matplotlib...

InstantCMS Code Issues Vulnerabilities

InstantCMS is a free and open source content management system. A security vulnerability exists in InstantCMS 2.17.3 and earlier versions, which stems from the package parameter in the installer function not effectively filtering user input. The vulnerability can be exploited by an attacker to sc...

Linux Distros Unpatched Vulnerability : CVE-2024-40675

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In parseUriInternal of Intent.java, there is a possible infinite loop due to improper input validation. This could lead to local denial of service with no...

Linux Distros Unpatched Vulnerability : CVE-2022-20476

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In setEnabledSetting of PackageManager.java, there is a possible way to get the device into an infinite reboot loop due to resource exhaustion. This could lead ...

Liferay Portal allows improper access through the expandoTableLocalService

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0, 2025.Q1.0 through 2025.Q1.14, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.18 and 7.4 GA through update 92 has a security vulnerability that allowing for improp...

CVE-2025-43773

CVE-2025-43773 affects Liferay Portal 7.4.0–7.4.3.132 and Liferay DXP versions up to 2025.Q2.0/2025.Q1.x and earlier 7.4 GA updates. The root cause is improper access control via expandoTableLocalService, leading to unauthorized access to data. Connected sources confirm the affected versions and ...

CVE-2025-43773

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0, 2025.Q1.0 through 2025.Q1.14, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.18 and 7.4 GA through update 92 has a security vulnerability that allowing for improp...

Linux Distros Unpatched Vulnerability : CVE-2022-45586

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack overflow vulnerability in function Dict::find in xpdf/Dict.cc in xpdf 4.04, allows local attackers to cause a denial of service. CVE-2022-45586 Note that...

Linux Distros Unpatched Vulnerability : CVE-2024-21853

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper finite state machines FSMs in the hardware logic in some 4th and 5th Generation IntelR XeonR Processors may allow an authorized user to potentially...