EUVD-2024-22339

Malicious code in bioql PyPI...

EUVD-2022-26404

Malicious code in bioql PyPI...

EUVD-2021-8990

Malicious code in bioql PyPI...

EUVD-2022-33819

Malicious code in bioql PyPI...

EUVD-2023-52324

Malicious code in bioql PyPI...

EUVD-2022-37756

Malicious code in bioql PyPI...

EUVD-2022-30635

Malicious code in bioql PyPI...

EUVD-2022-30864

Malicious code in bioql PyPI...

EUVD-2021-27596

Malicious code in bioql PyPI...

EUVD-2025-13886

Malicious code in bioql PyPI...

EUVD-2023-36911

Malicious code in bioql PyPI...

Server-side Request Forgery (SSRF)

Overview phpoffice/phpspreadsheet is a Spreadsheet engine that Read, Create and Write Spreadsheet documents in PHP . Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the setPath method of the PhpOffice\PhpSpreadsheet\Worksheet\Drawing class, where a user...

CVE-2025-24322

CVE-2025-24322 affects Tenda AC6 V5.0 V02.03.01.110 where the Initial Setup Authentication has an unsafe default configuration. A specially crafted network request can lead to arbitrary code execution, and an attacker can trigger this by browsing to the device. Connected sources (Talos blog, Red ...

Linux Distros Unpatched Vulnerability : CVE-2022-22740

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Certain network request objects were freed too early when releasing a network request handle. This could have lead to a use-after-free causing a potentially...

CVE-2025-20288

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a server-side request forgery SSRF attack through an affected device. This vulnerability is due to improper input validation for specific HTTP...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via specific endpoints. An attacker can make the system initiate arbitrary network requests to internal or external resources by sending crafted requests to these endpoints. Remediation There is no fixed...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS via the Thread Pooling component. An attacker can disrupt service availability by sending specially crafted requests over the network with high privileges. Details Denial of Service DoS describes a family of attack...

Access Control Bypass

Overview Affected versions of this package are vulnerable to Access Control Bypass via the Optimizer component. An attacker can gain unauthorized ability to create, delete, or modify critical data by sending crafted requests over the network with high privileges. Remediation A fix was pushed into...

Access Control Bypass

Overview Affected versions of this package are vulnerable to Access Control Bypass via the InnoDB component. An attacker can cause the server to hang or crash, and may perform unauthorized update, insert, or delete operations on accessible data by sending crafted requests over the network with hi...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS via the Optimizer component. An attacker can cause the server to hang or crash repeatedly by sending specially crafted requests over the network. Details Denial of Service DoS describes a family of attacks, all aim...