EUVD-2024-38580

Malicious code in bioql PyPI...

EUVD-2023-57916

Malicious code in bioql PyPI...

EUVD-2024-16615

Malicious code in bioql PyPI...

EUVD-2024-54807

Malicious code in bioql PyPI...

EUVD-2025-6692

Malicious code in bioql PyPI...

EUVD-2023-0700

Malicious code in bioql PyPI...

EUVD-2024-41300

Malicious code in bioql PyPI...

EUVD-2021-9211

Malicious code in bioql PyPI...

EUVD-2023-26907

Malicious code in bioql PyPI...

EUVD-2024-22933

Malicious code in bioql PyPI...

EUVD-2022-46863

Malicious code in bioql PyPI...

EUVD-2024-26941

Malicious code in bioql PyPI...

EUVD-2023-44939

Malicious code in bioql PyPI...

EUVD-2024-36381

Malicious code in bioql PyPI...

EUVD-2022-44756

Malicious code in bioql PyPI...

EUVD-2024-53899

Malicious code in bioql PyPI...

EUVD-2025-8263

Malicious code in bioql PyPI...

CVE-2025-61599 Emlog is Vulnerable to Stored Cross-Site Scripting (XSS) in "Twitter" Feature via Markdown Input

Emlog is an open source website building system. A stored Cross-Site Scripting XSS vulnerability exists in the "Twitter"feature of EMLOG Pro 2.5.21 and below. An authenticated user with privileges to post a "Twitter" message can inject arbitrary JavaScript code. The malicious script is stored on...

CVE-2025-20368

In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a low privileged user that does not hold the admin or power Splunk roles could craft a malicious payload through the error messages and job inspection...

A NULL pointer dereference flaw was found in the megasas-gen2 SCSI host bus adapter emulation of QEMU in versions before and including 6.0. This issue occurs in the megasas_command_cancelled() callback function while dropping a SCSI request. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

...