EUVD-2023-36772

Malicious code in bioql PyPI...

EUVD-2022-43460

Malicious code in bioql PyPI...

EUVD-2023-36769

Malicious code in bioql PyPI...

EUVD-2022-29552

Malicious code in bioql PyPI...

EUVD-2022-47581

Malicious code in bioql PyPI...

EUVD-2025-16759

Malicious code in bioql PyPI...

EUVD-2022-44915

Malicious code in bioql PyPI...

EUVD-2022-45506

Malicious code in bioql PyPI...

EUVD-2023-36770

Malicious code in bioql PyPI...

EUVD-2022-29551

Malicious code in bioql PyPI...

EUVD-2024-38082

Malicious code in bioql PyPI...

EUVD-2023-56988

Malicious code in bioql PyPI...

Due to URL previews in the network panel of developer tools improperly storing URLs, query parameters could potentially be used to overwrite global objects in privileged code. This vulnerability affects Firefox < 110.

...

(Pwn2Own) Microsoft Windows win32kfull Race Condition Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kfull...

CVE-2025-47857

CVE-2025-47857 describes an OS command injection in Fortinet FortiWeb CLI. Affected are FortiWeb CLI versions 7.6.0–7.6.3 and pre-7.4.8. The root cause is improper neutralization of special elements in CLI commands, enabling a privileged attacker to execute arbitrary code or commands via crafted ...

CVE-2023-45584

A double free vulnerability CWE-415 vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.4.0 through 7.4.1, FortiProxy 7.2.0 through 7.2.7, FortiProxy 7.0.0...

CVE-2023-45584

CVE-2023-45584 is a double free vulnerability (CWE-415) in multiple Fortinet products: FortiOS (versions 6.4; 7.0.0–7.0.12; 7.2.0–7.2.5; 7.4.0), FortiPAM (1.0–1.1.x), and FortiProxy (7.0.0–7.0.13; 7.2.0–7.2.7; 7.4.0–7.4.1) that allows a privileged attacker to execute code via crafted HTTP/HTTPS r...

CVE-2025-32766

A stack-based buffer overflow vulnerability CWE-121 in Fortinet FortiWeb CLI version 7.6.0 through 7.6.3 and before 7.4.8 allows a privileged attacker to execute arbitrary code or commands via crafted CLI commands...

CVE-2025-42950

SAP Landscape Transformation (SLT) is affected by a CVE-2025-42950 vulnerability in which an attacker with user privileges can exploit a flaw in a function module exposed via RFC to inject arbitrary ABAP code, bypassing authorization checks and potentially compromising confidentiality, integrity,...

PT-2025-32877 · Fortinet · Fortiweb Cli

Name of the Vulnerable Software and Affected Versions: Fortinet FortiWeb CLI versions 7.6.0 through 7.6.3 Fortinet FortiWeb CLI versions prior to 7.4.8 Description: A stack-based buffer overflow vulnerability allows a privileged attacker to execute arbitrary code or commands via crafted CLI...