EUVD-2022-5131

Malicious code in bioql PyPI...

EUVD-2022-39633

Malicious code in bioql PyPI...

EUVD-2023-23935

Malicious code in bioql PyPI...

EUVD-2022-4006

Malicious code in bioql PyPI...

EUVD-2022-2832

Malicious code in bioql PyPI...

EUVD-2022-4691

Malicious code in bioql PyPI...

EUVD-2025-30807

Malicious code in bioql PyPI...

EUVD-2022-2408

Malicious code in bioql PyPI...

EUVD-2024-22489

Malicious code in bioql PyPI...

EUVD-2022-28596

Malicious code in bioql PyPI...

EUVD-2023-48211

Malicious code in bioql PyPI...

EUVD-2022-3479

Malicious code in bioql PyPI...

EUVD-2022-2111

Malicious code in bioql PyPI...

EUVD-2022-3506

Malicious code in bioql PyPI...

EUVD-2023-35249

Malicious code in bioql PyPI...

CVE-2025-54292 Client-Side Path Traversal in LXD-UI

Path traversal in Canonical LXD LXD-UI versions before 6.5 and 5.21.4 on all platforms allows remote authenticated attackers to access or modify unintended resources via crafted resource names embedded in URL paths...

modules/rlm_unix/rlm_unix.c in FreeRADIUS before 2.2.0, when unix mode is enabled for user authentication, does not properly check the password expiration in /etc/shadow, which allows remote authenticated users to authenticate using an expired password.

...

PT-2025-40335

Name of the Vulnerable Software and Affected Versions Canonical LXD LXD-UI versions prior to 6.5 Canonical LXD LXD-UI versions prior to 5.21.4 Description A path traversal issue exists in Canonical LXD LXD-UI. Remote authenticated attackers can potentially access or modify unintended resources by...

Right-Click Execution - Windows LNK File Special UNC Path NTLM Leak

This module creates a malicious Windows shortcut LNK file that specifies a special UNC path in EnvironmentVariableDataBlock of Shell Link .LNK that can trigger an authentication attempt to a remote server. This can be used to harvest NTLM authentication credentials. When a victim right-click the...

CVE-2025-35033

Medical Informatics Engineering Enterprise Health has a CSV injection vulnerability that allows a remote, authenticated attacker to inject macros in downloadable CSV files. This issue is fixed as of 2025-03-14...