EUVD-2022-1005

Malicious code in bioql PyPI...

EUVD-2022-1842

Malicious code in bioql PyPI...

EUVD-2022-4126

Malicious code in bioql PyPI...

EUVD-2022-1609

Malicious code in bioql PyPI...

EUVD-2022-37721

Malicious code in bioql PyPI...

EUVD-2022-37720

Malicious code in bioql PyPI...

EUVD-2022-4744

Malicious code in bioql PyPI...

EUVD-2022-3026

Malicious code in bioql PyPI...

EUVD-2024-32505

Malicious code in bioql PyPI...

EUVD-2022-2715

Malicious code in bioql PyPI...

EUVD-2022-1979

Malicious code in bioql PyPI...

EUVD-2022-42401

Malicious code in bioql PyPI...

EUVD-2022-1452

Malicious code in bioql PyPI...

API Attack Awareness: Broken Object Level Authorization (BOLA) – Why It Tops the OWASP API Top 10

For this Cybersecurity Awareness Month, we thought it important to draw attention to some of the most common and dangerous API vulnerabilities. This week, we’re starting with Broken Object Level Authorization BOLA. BOLA vulnerabilities top the OWASP API Top Ten. And for good reason: they’re...

WordPress NGG Smart Image Search Plugin <= 3.4.3 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Prissy in WordPress Plugin NGG Smart Image Search versions = 3.4.3...

WordPress Real Estate Manager Plugin <= 7.3 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Real Estate Manager versions = 7.3...

WordPress Proof Factor – Social Proof Notifications Plugin <= 1.0.5 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Vinit Lakra in WordPress Plugin Proof Factor Social Proof Notifications versions = 1.0.5...

teler-waf

This repository is an open-source Go HTTP middleware called teler-waf, which protects local web services from various threats, including OWASP Top 10 vulnerabilities, malicious actors, botnets, and brute force attacks. The repository contains a variety of files, including issue templates, pull...

WordPress Developer Tools Blocker Plugin <= 3.2.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nabil Irawan in WordPress Plugin Developer Tools Blocker versions = 3.2.1...

VULSOVER: Vulnerability Detection Via LLM-Driven Constraint Solving

Traditional vulnerability detection methods rely heavily on predefined rule matching, which often fails to capture vulnerabilities accurately. With the rise of large language models LLMs, leveraging their ability to understand code semantics has emerged as a promising direction for achieving more...