EUVD-2025-20631

Malicious code in bioql PyPI...

EUVD-2024-21222

Malicious code in bioql PyPI...

EUVD-2022-28874

Malicious code in bioql PyPI...

EUVD-2022-28843

Malicious code in bioql PyPI...

EUVD-2022-28844

Malicious code in bioql PyPI...

EUVD-2024-43919

Malicious code in bioql PyPI...

EUVD-2025-16529

Malicious code in bioql PyPI...

EUVD-2022-48346

Malicious code in bioql PyPI...

EUVD-2022-46749

Malicious code in bioql PyPI...

EUVD-2024-33415

Malicious code in bioql PyPI...

EUVD-2022-28850

Malicious code in bioql PyPI...

EUVD-2022-28851

Malicious code in bioql PyPI...

PC-Doctor Toolbox before 7.3 has an Uncontrolled Search Path Element.

...

CVE-2025-11020

CVE-2025-11020 affects MarkAny SafePC Enterprise. A path traversal flaw can expose server information and potentially enable SQL Injection, with an accompanying risk of Unrestricted Upload of Dangerous Type files. Impacted versions include SafePC Enterprise 5.x.x and 7.0.0 through 7.0.1 on Window...

AS/400 Telnet 5250 terminal emulation clients, as implemented by (1) IBM client access, (2) Bosanova, (3) PowerTerm, (4) Mochasoft, and possibly other emulations, allows malicious AS/400 servers to execute arbitrary commands via a STRPCO (Start PC Organizer) command followed by STRPCCMD (Start PC command), as demonstrated by creating a backdoor account using REXEC.

...

CVE-2025-11233

Starting from Rust 1.87.0 and before Rust 1.89.0, the tier 3 Cygwin target x8664-pc-cygwin didn't correctly handle path separators, causing the standard library's Path API to ignore path components separated by backslashes. Due to this, programs compiled for Cygwin that validate paths could...

CVE-2025-11233: Improper Limitation of a Pathname to a Restricted Directory

Starting from Rust 1.87.0 and before Rust 1.89.0, the tier 3 Cygwin target x8664-pc-cygwin didn't correctly handle path separators, causing the standard library's Path API to ignore path components separated by backslashes. Due to this, programs compiled for Cygwin that validate paths could...

VulnCheck KEV: CVE-2022-37932

A potential security vulnerability has been identified in Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches. The vulnerability could be remotely exploited to allow authentication bypass. HPE has made the following software updates to resolve the vulnerability in...

Microsoft PC Manager Security Feature Bypass Vulnerability (Sep 2025) - Windows

Microsoft PC Manager is prone to a security feature bypass vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MAL-2025-47856 Malicious code in pc-analytics-promotion-creation-client (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4d66ab8f0d38376b6ec23e7703446b3c1d3849127ae2eb86050e41db25563bc Any computer that has this package installed or running should be considered...