EUVD-2025-7194

Malicious code in bioql PyPI...

EUVD-2022-39068

Malicious code in bioql PyPI...

EUVD-2025-8290

Malicious code in bioql PyPI...

EUVD-2022-24699

Malicious code in bioql PyPI...

CVE-2025-59821

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. Prior to version 10.1.0, DNN’s URL/path handling and template rendering can allow specially crafted input to be reflected into a user profile that is returned to the browser. In these cases,...

CVE-2025-59821 DNN vulnerable to Reflected Cross-Site Scripting (XSS) using url to profile

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. Prior to version 10.1.0, DNN’s URL/path handling and template rendering can allow specially crafted input to be reflected into a user profile that is returned to the browser. In these cases,...

CVE-2025-53692

creationtimestamp| type| source ---|---|--- 2025-09-22 00:02:11+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lzf45yrdis2s 2025-09-22 01:18:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lzfafs66d32c...

CVE-2025-9083

creationtimestamp| type| source ---|---|--- 2025-09-18 07:32:18+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lz3th6orwf2q 2025-09-18 07:32:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lz3th764lj2m...

CVE-2025-10493

creationtimestamp| type| source ---|---|--- 2025-09-18 07:27:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lz3t6amegp2x 2025-12-25 18:30:11+00:00| seen| https://bsky.app/profile/exploitdb-bot.bsky.social/post/3matfvqfi2l2u 2025-12-26 21:03:02+00:00| seen|...

CVE-2025-24088

The issue was addressed by adding additional logic. This issue is fixed in macOS Tahoe 26. An app may be able to override MDM-enforced settings from profiles...

CVE-2025-23316

creationtimestamp| type| source ---|---|--- 2025-09-17 19:45:18+00:00| seen| https://bsky.app/profile/crowdcyber.bsky.social/post/3lz2lwyaysv2p 2025-09-17 23:16:43+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lz2xqz57jk2d 2025-09-18 00:02:01+00:00| seen|...

CVE-2025-34186

creationtimestamp| type| source ---|---|--- 2025-09-16 23:27:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyyhvhe4ww2t 2025-09-17 01:32:05+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lyyou5fkyy2w 2025-09-17 21:02:30+00:00| seen|...

CVE-2025-34183

creationtimestamp| type| source ---|---|--- 2025-09-16 23:12:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyyh2lb7ii2j 2025-09-17 04:32:12+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lyyyw7ljza2m 2025-09-17 21:02:28+00:00| seen|...

CVE-2025-9708

creationtimestamp| type| source ---|---|--- 2025-09-16 14:11:59+00:00| seen| https://seclists.org/oss-sec/2025/q3/169 2025-09-16 17:02:56+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lyxsfpzkhn2p 2025-09-16 18:06:08+00:00| seen|...

CVE-2025-24088

The issue was addressed by adding additional logic. This issue is fixed in macOS Tahoe 26. An app may be able to override MDM-enforced settings from profiles...

CVE-2025-10452

creationtimestamp| type| source ---|---|--- 2025-09-15 04:31:58+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lytxxxdwn72d 2025-09-15 05:17:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyu2iyut2i2x...

PT-2025-37777

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Tahoe 26 Description: An application may be able to override Mobile Device Management MDM-enforced settings from profiles. The issue was addressed by adding additional logic. Recommendations: Update to macOS Tahoe 26 o...

GHSA-4269-MCFH-CP7Q Indico may disclose unauthorized user details access via legacy API

Impact A legacy API to retrieve user details could be misused to retrieve profile details of other users without having admin permissions due to a broken access check. Patches You should to update to Indico 3.3.8 as soon as possible. See the docs for instructions on how to update. Workarounds It ...

CVE-2025-10155

creationtimestamp| type| source ---|---|--- 2025-09-10 19:51:37+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-jgw4-cr84-mqxg 2025-09-17 10:31:59+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lyzmzk6thf2o 2025-09-17 11:32:14+00:00| seen|...

CVE-2025-59034 Indico may disclose unauthorized user details access via legacy API

Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Prior to version 3.3.8, a legacy API to retrieve user details could be misused to retrieve profile details of other users without having admin permissions due to a broken access check...