EUVD-2022-29429

Malicious code in bioql PyPI...

EUVD-2021-6530

Malicious code in bioql PyPI...

EUVD-2024-34641

Malicious code in bioql PyPI...

EUVD-2025-17914

Malicious code in bioql PyPI...

EUVD-2021-8696

Malicious code in bioql PyPI...

EUVD-2024-47193

Malicious code in bioql PyPI...

EUVD-2024-40681

Malicious code in bioql PyPI...

EUVD-2025-29776

Malicious code in bioql PyPI...

GHSA-Q82V-H4RQ-5C86 Rancher update on users can deny the service to the admin

Impact A vulnerability has been identified within Rancher Manager where a missing server-side validation on the .username field in Rancher can allow users with update permissions on other User resources to cause denial of access for targeted accounts. Specifically: - Username takeover: A user wit...

osCommerce security vulnerabilities

osCommerce is an open source online shopping e-commerce solution based on the GNUGPL license from osCommerce, Inc. A security vulnerability exists in osCommerce 2.2 RC2a and earlier versions, which stems from a lack of input validation and access control in the Manage File Manager tool, and could...

CVE-2025-36003

IBM Security Verify Governance Identity Manager 10.0.2 could allow a remote attacker to obtain sensitive information when detailed technical error messages are returned. This information could be used in further attacks against the system...

Cisco Catalyst SD-WAN Manager Unauthorized Access

The vulnerability of the application software interface of the Cisco Catalyst SD-WAN Manager is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

CVE-2025-52353

The badaso/core component in Badaso CMS 2.9.11 is vulnerable to Arbitrary Code Execution (ACE) due to improper content-type validation within the Media Manager's file-upload endpoint. Authenticated users can upload files containing embedded PHP code (e.g., a backdoor hidden in a PDF renamed with ...

Linux Distros Unpatched Vulnerability : CVE-2010-2198

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lib/fsm.c in RPM 4.8.0 and earlier does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade or deleti...

Desktop Window Manager Code Execution

The vulnerability of desktop window managers in Windows operating systems relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2025-8098

An improper permission vulnerability was reported in Lenovo PC Manager that could allow a local attacker to escalate privileges...

F5 Networks BIG-IP : BIG-IP APM vulnerability (K000151546)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10.8 / 16.1.6 / 17.1.2.2. It is, therefore, affected by a vulnerability as referenced in the K000151546 advisory. When Network Access is configured on a BIG-IP APM virtual server, undisclosed traffic can cause the...

WordPress plugin Asset-Manager has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2013-10054

CVE-2013-10054 affects LibrettoCMS (1.1.7 and possibly earlier) via the File Manager plugin. The upload handler at adm/ui/js/ckeditor/plugins/pgrfilemanager/php/upload.php does not properly validate file extensions, allowing unauthenticated upload of files that can be renamed to executable .php s...

WeGIA personalizacao_selecao.php XSS

The vulnerability of the personalizacaoselecao.php web handler of the WeGIA browser is related to the lack of measures taken to protect the website structure when processing the nomecar parameter. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks XSS...