Lucene search
+L

3091 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•23 views

EUVD-2023-58546

Malicious code in bioql PyPI...

8.3CVSS7.3AI score0.09521EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2024-20834

Malicious code in bioql PyPI...

8.8CVSS6.6AI score0.00547EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2022-40389

Malicious code in bioql PyPI...

7.2CVSS7.1AI score0.02219EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2015-0250

Malicious code in bioql PyPI...

5CVSS6.2AI score0.16472EPSS
SaveExploits0References34
OSV
OSV
•added 2025/10/03 7:57 p.m.•11 views

RLSA-2025:9421 Moderate: iputils security update

The iputils packages contain basic utilities for monitoring a network, including ping. Security Fixes: iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping CVE-2025-47268 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and...

6.5CVSS6.9AI score0.01745EPSS
SaveExploits1References2
Rockylinux
Rockylinux
•added 2025/10/03 7:57 p.m.•10 views

iputils security update

An update is available for iputils. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The iputils packages contain basic utilities for monitoring a network,...

6.5CVSS6.8AI score0.01745EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/09/26 2:48 p.m.•10 views

CVE-2025-10950

A vulnerability was determined in geyang ml-logger up to acf255bade5be6ad88d90735c8367b28cbe3a743. Affected is the function loghandler of the file mllogger/server.py of the component Ping Handler. This manipulation of the argument data causes deserialization. It is possible to initiate the attack...

6.5CVSS6.8AI score0.00313EPSS
SaveExploits0References1
Snyk
Snyk
•added 2025/09/25 3:30 p.m.•10 views

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the loghandler function of the Ping Handler component in the server process. An attacker can execute arbitrary code or manipulate application behavior by sending specially crafted data to be...

6.5CVSS7.8AI score0.00313EPSS
SaveExploits0References2
OSV
OSV
•added 2025/09/25 3:30 p.m.•9 views

GHSA-57HM-8RJV-498W ml-logger deserialization vulnerability

A vulnerability was determined in geyang ml-logger 0.10.36 and prior. Affected is the function loghandler of the file mllogger/server.py of the component Ping Handler. This manipulation of the argument data causes deserialization. It is possible to initiate the attack remotely. The exploit has be...

6.3CVSS6.8AI score0.00313EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2025/09/25 3:30 p.m.•14 views

ml-logger deserialization vulnerability

A vulnerability was determined in geyang ml-logger 0.10.36 and prior. Affected is the function loghandler of the file mllogger/server.py of the component Ping Handler. This manipulation of the argument data causes deserialization. It is possible to initiate the attack remotely. The exploit has be...

6.5CVSS6.8AI score0.00313EPSS
SaveExploits0References6Affected Software1
RedhatCVE
RedhatCVE
•added 2025/09/25 2:53 a.m.•15 views

CVE-2025-42907

SAP BI Platform allows an attacker to modify the IP address of the LogonToken for the OpenDoc. On accessing the modified link in the browser a different server could get the ping request. This has low impact on integrity with no impact on confidentiality and availability of the system...

4.3CVSS6.7AI score0.00219EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/25 12:00 a.m.•11 views

PT-2025-39393

Name of the Vulnerable Software and Affected Versions geyang ml-logger affected versions not specified Description A flaw exists in geyang ml-logger. The log handler function within the ml logger/server.py file, specifically in the Ping Handler component, is susceptible to deserialization due to...

6.5CVSS6.3AI score0.00313EPSS
SaveExploits0References14
CNNVD
CNNVD
•added 2025/09/25 12:00 a.m.•13 views

ML-Logger 安全漏洞

ML-Logger is a logger, server and visualization dashboard for machine learning projects by Ge Yang Personal Developer. A security vulnerability exists in ML-Logger acf255bade5be6ad88d90735c8367b28cbe3a743 and prior versions, which stems from an incorrect manipulation of the parameter data of the...

6.5CVSS6.3AI score0.00313EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/25 12:00 a.m.•1 views

CVE-2025-10950: Deserialization of Untrusted Data

A vulnerability was determined in geyang ml-logger up to acf255bade5be6ad88d90735c8367b28cbe3a743. Affected is the function loghandler of the file mllogger/server.py of the component Ping Handler. This manipulation of the argument data causes deserialization. It is possible to initiate the attack...

6.5CVSS5.2AI score0.00313EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/09/24 12:28 a.m.•22 views

CVE-2025-43953

In 2wcom IP-4c 2.16, the web interface allows admin and manager users to execute arbitrary code as root via a ping or traceroute field on the TCP/IP screen...

8.8CVSS7.8AI score0.07619EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/23 2:15 a.m.•20 views

CVE-2025-42907

SAP BI Platform allows an attacker to modify the IP address of the LogonToken for the OpenDoc. On accessing the modified link in the browser a different server could get the ping request. This has low impact on integrity with no impact on confidentiality and availability of the system...

4.3CVSS0.00219EPSS
SaveExploits0References2
CVE
CVE
•added 2025/09/23 1:58 a.m.•34 views

CVE-2025-42907

CVE-2025-42907 concerns SAP BI Platform. Multiple connected sources confirm a vulnerability where an attacker can modify the IP address in the LogonToken attached to OpenDoc, and when the modified link is opened in a browser, a different server could receive a ping request. The impact is describe...

4.3CVSS6.4AI score0.00219EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/09/23 1:58 a.m.•28 views

CVE-2025-42907 Server-Side Request Forgery in SAP BI Platform

SAP BI Platform allows an attacker to modify the IP address of the LogonToken for the OpenDoc. On accessing the modified link in the browser a different server could get the ping request. This has low impact on integrity with no impact on confidentiality and availability of the system...

4.3CVSS0.00219EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/23 12:00 a.m.•3 views

CVE-2025-42907: Server-Side Request Forgery (SSRF)

SAP BI Platform allows an attacker to modify the IP address of the LogonToken for the OpenDoc. On accessing the modified link in the browser a different server could get the ping request. This has low impact on integrity with no impact on confidentiality and availability of the system...

4.3CVSS5.8AI score0.00219EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/23 12:00 a.m.•17 views

PT-2025-39106

Name of the Vulnerable Software and Affected Versions SAP BI Platform affected versions not specified Description An attacker can modify the IP address within the LogonToken associated with OpenDoc. Accessing the modified link in a web browser may redirect a ping request to a different server. Th...

4.3CVSS6.2AI score0.00219EPSS
SaveExploits0References6
Rows per page
Query Builder