EUVD-2022-29200

Malicious code in bioql PyPI...

EUVD-2025-19534

Malicious code in bioql PyPI...

EUVD-2023-33504

Malicious code in bioql PyPI...

EUVD-2024-55005

Malicious code in bioql PyPI...

EUVD-2023-33503

Malicious code in bioql PyPI...

EUVD-2025-27464

Malicious code in bioql PyPI...

EUVD-2022-26379

Malicious code in bioql PyPI...

EUVD-2021-8143

Malicious code in bioql PyPI...

EUVD-2022-30588

Malicious code in bioql PyPI...

EUVD-2023-30884

Malicious code in bioql PyPI...

EUVD-2023-33505

Malicious code in bioql PyPI...

EUVD-2025-27480

Malicious code in bioql PyPI...

EUVD-2025-27472

Malicious code in bioql PyPI...

EUVD-2025-27468

Malicious code in bioql PyPI...

EUVD-2022-45323

Malicious code in bioql PyPI...

EUVD-2022-28908

Malicious code in bioql PyPI...

CVE-2025-34177

In pfSense CE /suricata/suricataflowstream.php, the value of the policyname parameter is not sanitized of HTML-related strings/characters before being directly displayed. This can result in stored cross-site scripting. The attacker must be authenticated with at least "WebCfg - Services: suricata...

CVE-2025-34173

In pfSense CE /usr/local/www/snort/snortipreputation.php, the value of the iplist parameter is not sanitized of directory traversal-related characters/strings before being used to check if a file exists. While the contents of the file cannot be read, the server reveals whether a file exists, whic...

CVE-2025-34175

In pfSense CE /usr/local/www/suricata/suricatafilecheck.php, the value of the filehash parameter is directly displayed without sanitizing for HTML-related characters/strings. This can result in reflected cross-site scripting if the victim is authenticated...

CVE-2025-34176

In pfSense CE /suricata/suricataipreputation.php, the value of the iplist parameter is not sanitized of directory traversal-related strings/characters. This value is directly used in a file existence check operation. While the contents of the file cannot be read, the server reveals whether the fi...