EUVD-2024-2772

Malicious code in bioql PyPI...

EUVD-2024-0446

Malicious code in bioql PyPI...

EUVD-2024-3507

Malicious code in bioql PyPI...

EUVD-2022-7065

Malicious code in bioql PyPI...

EUVD-2023-2663

Malicious code in bioql PyPI...

EUVD-2024-2404

Malicious code in bioql PyPI...

EUVD-2025-26391

Malicious code in bioql PyPI...

EUVD-2022-6465

Malicious code in bioql PyPI...

EUVD-2024-3158

Malicious code in bioql PyPI...

EUVD-2022-1175

Malicious code in bioql PyPI...

Security Bulletin: Multiple vulnerabilities in IBM Aspera Console

Summary Multiple vulnerabilities were addressed in IBM Aspera Console version 3.4.7. Vulnerability Details CVEID:CVE-2022-44566 DESCRIPTION: A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter 7.0.4.1 and 6.1.7.1. When a value outside the range for a 64bit signed intege...

geminabox

It is an offensive tool for RubyGem hosting. The repository contains a simple RubyGem hosting system called Gem in a Box. It allows users to host their own RubyGems, and it includes features such as user authentication, gem versioning, and a web interface for browsing and downloading gems. The to...

CVE-2025-58767 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, jruby, gitlab-rails-ce-fips, gitlab-rails-ce, logstash, ruby3.2-fluentd-kubernetes-daemonset, truffleruby, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset...

GHSA-C2F4-JGMC-Q2R5 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, jruby, gitlab-rails-ce-fips, gitlab-rails-ce, logstash, ruby3.2-fluentd-kubernetes-daemonset, truffleruby, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset...

CVE-2025-54572 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce...

GHSA-RRQH-93C8-J966 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce...

ruby-dragonfly

This repository is an offensive tool for Ruby. It is a highly customizable gem for handling images and other attachments, and is already in use on thousands of websites. The tool is designed to generate image thumbnails in Rails and to manage attachments in web applications. It provides a range o...

Linux Distros Unpatched Vulnerability : CVE-2019-25025

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The activerecord-sessionstore aka Active Record Session Store component through 1.1.3 for Ruby on Rails does not use a constant-time approach when delivering...

CVE-2025-58067

Basecamp's Google Sign-In adds Google sign-in to Rails applications. Prior to version 1.3.1, it is possible to redirect a user to another origin if the "proceedto" value in the session store is set to a protocol-relative URL. Normally the value of this URL is only written and read by the library ...

CVE-2025-57821

Basecamp's Google Sign-In adds Google sign-in to Rails applications. Prior to version 1.3.0, it is possible to craft a malformed URL that passes the "same origin" check, resulting in the user being redirected to another origin. Rails applications configured to store the flash information in a...