EUVD-2024-18584

Malicious code in bioql PyPI...

EUVD-2022-36726

Malicious code in bioql PyPI...

EUVD-2025-6137

Malicious code in bioql PyPI...

EUVD-2024-34972

Malicious code in bioql PyPI...

EUVD-2024-18613

Malicious code in bioql PyPI...

EUVD-2025-23768

Malicious code in bioql PyPI...

EUVD-2024-34926

Malicious code in bioql PyPI...

EUVD-2024-54242

Malicious code in bioql PyPI...

EUVD-2023-35054

Malicious code in bioql PyPI...

EUVD-2024-18539

Malicious code in bioql PyPI...

EUVD-2022-31077

Malicious code in bioql PyPI...

EUVD-2022-48452

Malicious code in bioql PyPI...

EUVD-2021-9440

Malicious code in bioql PyPI...

EUVD-2021-9532

Malicious code in bioql PyPI...

CVE-2025-57714 NetBak Replicator

An unquoted search path or element vulnerability has been reported to affect NetBak Replicator. If a local attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: NetBak...

CVE-2025-54086

CVE-2025-54086 is an excess permissions vulnerability in the Warehouse component of Absolute Secure Access prior to version 14.10. Attackers with access to the local file system can read the Java keystore file. The attack complexity is low, there are no attack requirements, the privileges require...

CVE-2025-54086

CVE-2025-54086 affects Absolute Secure Access, Warehouse component, prior to version 14.10. The vulnerability is an excess-permissions issue enabling attackers with local file-system access to read the Java keystore file. Severity: CVSS 3.1 Base 3.3 (LOW) to CVSS 4.0 Base 5.3 (MEDIUM) depending o...

PT-2025-40365

Name of the Vulnerable Software and Affected Versions FrostWire version 6.14.0-build-326 Description The software has permissive entitlements, specifically allow-dyld-environment-variables and disable-library-validation. These entitlements permit unprivileged local attackers to inject code into t...

CVE-2025-41421

CVE-2025-41421 describes a privilege-escalation flaw in TeamViewer components due to improper handling of symbolic links. A local, unprivileged attacker on Windows can spoof the update file path in TeamViewer Full Client, TeamViewer Host, and, per related sources, TeamViewer Remote and Tensor, fo...

CVE-2025-43943

Dell Cloud Disaster Recovery, versions prior to 19.20, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with...