EUVD-2022-2615

Malicious code in bioql PyPI...

EUVD-2022-34707

Malicious code in bioql PyPI...

EUVD-2023-33697

Malicious code in bioql PyPI...

EUVD-2023-43838

Malicious code in bioql PyPI...

EUVD-2023-55067

Malicious code in bioql PyPI...

EUVD-2022-3459

Malicious code in bioql PyPI...

EUVD-2021-34636

Malicious code in bioql PyPI...

EUVD-2022-4053

Malicious code in bioql PyPI...

EUVD-2022-2108

Malicious code in bioql PyPI...

EUVD-2025-22535

Malicious code in bioql PyPI...

EUVD-2023-34432

Malicious code in bioql PyPI...

EUVD-2023-2470

Malicious code in bioql PyPI...

phar wrapper can occur dos when using quine gzip file

...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Php

sudo docker run -it --rm -p 8080:80 php:8.0.29-apache bash...

CVE-2025-10001: Unrestricted Upload of File with Dangerous Type

The Import any XML, CSV or Excel File to WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the import functionality in all versions up to, and including, 3.9.3. This makes it possible for authenticated attackers, with Administrator-level...

Linux Distros Unpatched Vulnerability : CVE-2020-14209

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dolibarr before 11.0.5 allows low-privilege users to upload files of dangerous types, leading to arbitrary code execution. This occurs because .pht and .phar...

Linux Distros Unpatched Vulnerability : CVE-2018-19274

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Passing an absolute path to a fileexists check in phpBB before 3.2.4 allows Remote Code Execution through Object Injection by employing Phar deserialization whe...

Linux Distros Unpatched Vulnerability : CVE-2020-36388

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In CiviCRM before 5.21.3 and 5.22.x through 5.24.x before 5.24.3, users may be able to upload and execute a crafted PHAR archive. CVE-2020-36388 Note that Nessu...

Linux Distros Unpatched Vulnerability : CVE-2018-17057

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in TCPDF before 6.2.22. Attackers can trigger deserialization of arbitrary data via the phar:// wrapper. CVE-2018-17057 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2022-31628

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress quines gzip files, resulting in an infinite loop...