Unity Linux 20.1070e Security Update: golang (UTSA-2025-986182)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986182 advisory. Requests forwarded by ReverseProxy include the raw query parameters from the inbound request, including unparsable parameters rejected by net/http. This could permit...

EUVD-2022-4996

Malicious code in bioql PyPI...

EUVD-2023-28022

Malicious code in bioql PyPI...

EUVD-2025-27136

Malicious code in bioql PyPI...

EUVD-2024-0362

Malicious code in bioql PyPI...

EUVD-2025-25115

Malicious code in bioql PyPI...

EUVD-2024-50261

Malicious code in bioql PyPI...

EUVD-2022-35112

Malicious code in bioql PyPI...

EUVD-2023-2611

Malicious code in bioql PyPI...

EUVD-2024-3162

Malicious code in bioql PyPI...

EUVD-2022-4512

Malicious code in bioql PyPI...

EUVD-2022-1591

Malicious code in bioql PyPI...

EUVD-2021-8630

Malicious code in bioql PyPI...

EUVD-2024-53503

Malicious code in bioql PyPI...

EUVD-2025-3065

Malicious code in bioql PyPI...

EUVD-2023-2488

Malicious code in bioql PyPI...

MyClub 安全漏洞

MyClub is a club management software for jibux individual developers. A security vulnerability exists in MyClub version 0.5, which stems from insufficient cleanup of query parameter inputs and could lead to an SQL injection attack...

The vulnerability of the command-line interface of Cisco IOS XE allows a hacker to execute arbitrary commands.

The vulnerability of the command-line interface in Cisco IOS XE operating systems is related to incorrect validation of query parameters. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

Perplexity AI Web Application 安全漏洞

Perplexity AI Web Application is a big data search engine application utilizing a big language model from Perplexity, Inc. in the United States. A security vulnerability exists in Perplexity AI Web Application that stems from a GET parameter that could lead to the disclosure of sensitive...

CVE-2025-59155 hackmd-mcp server-side request forgery in HTTP transport mode

hackmd-mcp is a Model Context Protocol server for integrating HackMD's note-taking platform with AI assistants. From 1.4.0 to before 1.5.0, hackmd-mcp contains a server-side request forgery SSRF vulnerability when the server is run in HTTP transport mode. Arbitrary hackmdApiUrl values supplied vi...