EUVD-2024-26188

Malicious code in bioql PyPI...

EUVD-2021-28790

Malicious code in bioql PyPI...

EUVD-2022-52590

Malicious code in bioql PyPI...

EUVD-2021-27707

Malicious code in bioql PyPI...

EUVD-2022-2648

Malicious code in bioql PyPI...

EUVD-2021-33342

Malicious code in bioql PyPI...

EUVD-2022-44748

Malicious code in bioql PyPI...

EUVD-2022-3752

Malicious code in bioql PyPI...

EUVD-2024-40838

Malicious code in bioql PyPI...

EUVD-2022-2378

Malicious code in bioql PyPI...

EUVD-2021-28355

Malicious code in bioql PyPI...

EUVD-2022-2717

Malicious code in bioql PyPI...

EUVD-2025-10417

Malicious code in bioql PyPI...

The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. Note: This has been disputed by multiple third parties as not being reproduceable and they argue this is not a valid vulnerability.

...

Bolt before 3.6.10 has XSS via a title that is mishandled in the system log

...

PT-2025-39966

Name of the Vulnerable Software and Affected Versions PAD CMS affected versions not specified Description The software improperly initializes a parameter used during the password recovery process. This allows an attacker to change the password for any user who has not utilized the password reset...

go-mail 参数注入漏洞

go-mail is a Golang library with mail sending functionality by the individual developer Winni Neessen. A parameter injection vulnerability exists in go-mail version 0.7.0 and earlier, which stems from mishandling of the mail.Address value, which can lead to incorrect address routing or ESMTP...

CampCodes Online Learning Management System SQL注入漏洞

CampCodes Online Learning Management System is an online learning management system from CampCodes Philippines, Inc. A SQL injection vulnerability exists in CampCodes Online Learning Management System version 1.0, which stems from an incorrect manipulation of the classid parameter in the file...

openssh: Machine-in-the-middle attack if VerifyHostKeyDNS is enabled

A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying the host key. Fo...

Vvveb 安全漏洞

Vvveb is a powerful and easy-to-use CMS from Givan Individual Developers for building websites, blogs or e-commerce stores. A security vulnerability exists in Vvveb version 1.0.7.2 and earlier, which stems from an unknown code mishandling that could lead to a cross-site request forgery attack...