EUVD-2024-0772

Malicious code in bioql PyPI...

EUVD-2024-50290

Malicious code in bioql PyPI...

EUVD-2024-45833

Malicious code in bioql PyPI...

EUVD-2024-24549

Malicious code in bioql PyPI...

EUVD-2023-36629

Malicious code in bioql PyPI...

EUVD-2023-48774

Malicious code in bioql PyPI...

EUVD-2024-35107

Malicious code in bioql PyPI...

EUVD-2023-48772

Malicious code in bioql PyPI...

EUVD-2024-35106

Malicious code in bioql PyPI...

EUVD-2023-41932

Malicious code in bioql PyPI...

EUVD-2024-24550

Malicious code in bioql PyPI...

EUVD-2025-16233

Malicious code in bioql PyPI...

EUVD-2024-46991

Malicious code in bioql PyPI...

EUVD-2022-41347

Malicious code in bioql PyPI...

Abusing Notion’s AI Agent for Data Theft

Notion just released version 3.0, complete with AI agents. Because the system contains Simon Willson's lethal trifecta, it's vulnerable to data theft though prompt injection. First, the trifecta: The lethal trifecta of capabilities is: Access to your private data --one of the most common purposes...

Linux Distros Unpatched Vulnerability : CVE-2017-8053

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PoDoFo 0.9.5 allows denial of service infinite recursion and stack consumption via a crafted PDF file in PoDoFo::PdfParser::ReadDocumentStructure PdfParser.cpp...

Linux Distros Unpatched Vulnerability : CVE-2018-5686

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In MuPDF 1.12.0, there is an infinite loop vulnerability and application hang in the pdfparsearray function pdf/pdf-parse.c because EOF is not considered. Remot...

Linux Distros Unpatched Vulnerability : CVE-2018-1000036

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Artifex MuPDF 1.12.0 and earlier, multiple memory leaks in the PDF parser allow an attacker to cause a denial of service memory leak via a crafted file...

GHSA-P72G-PV48-7W9X Apache Tika XXE Vulnerability via Crafted XFA File Inside a PDF

Critical XXE in Apache Tika tika-parser-pdf-module in Apache Tika 1.13 through and including 3.2.1 on all platforms allows an attacker to carry out XML External Entity injection via a crafted XFA file inside of a PDF. An attacker may be able to read sensitive data or trigger malicious requests to...

Linux Distros Unpatched Vulnerability : CVE-2018-6072

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow leading to use after free in PDFium in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption...