EUVD-2025-28859

Malicious code in bioql PyPI...

EUVD-2025-31144

Malicious code in bioql PyPI...

EUVD-2025-29141

Malicious code in bioql PyPI...

EUVD-2023-24146

Malicious code in bioql PyPI...

EUVD-2024-19986

Malicious code in bioql PyPI...

EUVD-2022-15973

Malicious code in bioql PyPI...

EUVD-2022-34441

Malicious code in bioql PyPI...

EUVD-2025-27153

Malicious code in bioql PyPI...

EUVD-2025-18850

Malicious code in bioql PyPI...

EUVD-2025-29135

Malicious code in bioql PyPI...

EUVD-2023-12680

Malicious code in bioql PyPI...

EUVD-2024-44493

Malicious code in bioql PyPI...

EUVD-2025-30774

Malicious code in bioql PyPI...

The vulnerability of the GitFlic platform, related to the lack of authentication, allows a malicious user to execute arbitrary HTTP requests on behalf of the server.

The vulnerability of the GitFlic platform’s code-related functionality lies in the lack of authentication. Exploiting this vulnerability allows a malicious actor to remotely execute arbitrary HTTP requests on behalf of the server...

CVE-2025-59489

Unity Runtime before 2025-10-02 on Android, Windows, macOS, and Linux allows argument injection that can result in loading of library code from an unintended location. If an application was built with a version of Unity Editor that had the vulnerable Unity Runtime code, then an adversary may be...

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Supported versions that are affected are Oracle Java SE: 8u341, 8u345-perf, 11.0.16.1, 17.0.4.1, 19; Oracle GraalVM Enterprise Edition: 20.3.7, 21.3.3 and 22.2.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web

...

Cisco Firepower Threat Defense Software Encrypted Archive File Policy Bypass (cisco-sa-ftd-archive-bypass-z4wQjwcN)

A vulnerability in the file policy feature that is used to inspect encrypted archive files of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass a configured file policy to block an encrypted archive file. This vulnerability exists because of a...

CVE-2025-11125

A vulnerability was found in langleyfcu Online Banking System up to 57437e6400ce0ae240e692c24e6346b8d0c17d7a. Affected by this vulnerability is an unknown functionality of the file /connectionerror.php of the component Error Message Handler. Performing manipulation of the argument Error results i...

CVE-2025-11134

A security vulnerability has been detected in Cudy TR1200 1.16.3-20230804-164635. Impacted is an unknown function of the file /cgi-bin/luci/admin/network/wireless/config/ of the component Wireless Settings Page. Such manipulation of the argument SSID leads to cross site scripting. It is possible ...

CVE-2025-57874

There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS 11.4 and below that may allow a remote authenticated attacker with administrative access to supply a crafted string which would execute arbitrary JavaScript code in the browser...