15842 matches found
PYSEC-2025-156
A vulnerability was identified in Open Asset Import Library Assimp 6.0.2. Affected by this vulnerability is the function ODDLParser::getNextSeparator in the library assimp/contrib/openddlparser/include/openddlparser/OpenDDLParserUtils.h. Such manipulation leads to heap-based buffer overflow. The...
UBUNTU-CVE-2025-11274
A vulnerability was determined in Open Asset Import Library Assimp 6.0.2. Affected is the function Q3DImporter::InternReadFile of the file assimp/code/AssetLib/Q3D/Q3DLoader.cpp. This manipulation causes allocation of resources. The attack is restricted to local execution. The exploit has been...
PT-2025-40796
Name of the Vulnerable Software and Affected Versions samanhappy MCPHub versions up to 0.9.10 Description A flaw exists in samanhappy MCPHub that allows for remote operating system command injection. The issue is related to the manipulation of the command/args argument within the file...
PT-2025-40824
Name of the Vulnerable Software and Affected Versions Vanderlande Baggage 360 version 7.0.0 Description An issue exists in the processing of files within Vanderlande Baggage 360. Manipulation of the Message argument in the /api-addons/v1/messages API endpoint can lead to cross site scripting. Thi...
PT-2025-40800
Name of the Vulnerable Software and Affected Versions samanhappy MCPHub versions up to 0.9.10 Description A flaw exists due to improper authentication within the handleSseConnectionfunction function located in the src/services/sseService.ts file. This issue allows for remote attacks, and a public...
PT-2025-40826
Name of the Vulnerable Software and Affected Versions Tipray Data Leakage Prevention System version 1.0 Description A flaw exists in Tipray Data Leakage Prevention System. Specifically, manipulation of the sort argument within the findFileServerPage function, accessible through the...
PT-2025-40807
Name of the Vulnerable Software and Affected Versions ixmaps website2017 versions prior to 0c71cffa0162186bc057a76766bc97e9f5a3a2d0 Description A security flaw exists that allows for cross site scripting. The issue is related to the manipulation of the trid argument within an HTTP GET request...
PT-2025-40801
Name of the Vulnerable Software and Affected Versions CRMEB versions prior to 5.7 Description A security flaw exists in CRMEB that allows for SQL injection. The issue is related to the processing of the cate id argument within the GET Parameter Handler component, specifically in the file...
PT-2025-40784
Name of the Vulnerable Software and Affected Versions Open Asset Import Library Assimp version 6.0.2 Description A heap-based buffer overflow exists in the function ODDLParser::getNextSeparator within the assimp/contrib/openddlparser/include/openddlparser/OpenDDLParserUtils.h library. This issue...
CVE-2025-11273
A vulnerability was found in LaChatterie Verger up to 1.2.10. This impacts the function redirectToAuthorization of the file /src/main/services/mcp/oauth/provider.ts. The manipulation of the argument URL results in deserialization. The attack can be executed remotely. The exploit has been made...
EUVD-2024-51143
Malicious code in bioql PyPI...
EUVD-2025-16927
Malicious code in bioql PyPI...
EUVD-2024-44128
Malicious code in bioql PyPI...
EUVD-2023-58876
Malicious code in bioql PyPI...
EUVD-2023-44420
Malicious code in bioql PyPI...
EUVD-2025-2063
Malicious code in bioql PyPI...
EUVD-2023-57624
Malicious code in bioql PyPI...
EUVD-2025-15648
Malicious code in bioql PyPI...