EUVD-2025-24705

Malicious code in bioql PyPI...

EUVD-2022-34625

Malicious code in bioql PyPI...

EUVD-2025-10774

Malicious code in bioql PyPI...

EUVD-2025-24786

Malicious code in bioql PyPI...

EUVD-2023-54007

Malicious code in bioql PyPI...

EUVD-2022-44455

Malicious code in bioql PyPI...

EUVD-2025-10740

Malicious code in bioql PyPI...

EUVD-2022-1695

Malicious code in bioql PyPI...

EUVD-2024-46769

Malicious code in bioql PyPI...

EUVD-2025-26577

Malicious code in bioql PyPI...

EUVD-2025-28041

Malicious code in bioql PyPI...

PT-2025-40557

Name of the Vulnerable Software and Affected Versions QNAP versions prior to QTS 5.2.6.3195 build 20250715 QNAP versions prior to QuTS hero h5.2.6.3195 build 20250715 Description A path traversal issue exists in QNAP operating systems. A remote attacker with administrator privileges may be able t...

CVE-2025-56520

Dify v1.6.0 was discovered to contain a Server-Side Request Forgery SSRF via the component controllers.console.remotefiles.RemoteFileUploadApi. A different vulnerability than CVE-2025-29720...

CVE-2025-56520

Dify v1.6.0 was discovered to contain a Server-Side Request Forgery SSRF via the component controllers.console.remotefiles.RemoteFileUploadApi. A different vulnerability than CVE-2025-29720...

[SECURITY] Fedora 41 Update: nextcloud-31.0.9-1.fc41

NextCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing rig ht on the web. NextCloud is extendable via a simple but powerful API...

dify security vulnerabilities

dify is an open source LLM application development platform from LangGenius Open Source. A security vulnerability exists in version 1.6.0 of dify, which stems from a server-side request forgery in the controllers.console.remotefiles.RemoteFileUploadApi component, which could lead to a server-side...

PT-2025-40009

Name of the Vulnerable Software and Affected Versions Dify version 1.6.0 Description The software contains a Server-Side Request Forgery SSRF issue. This occurs through the component controllers.console.remote files.RemoteFileUploadApi. The issue is distinct from CVE-2025-29720. Recommendations A...

CVE-2025-56520

Dify v1.6.0 was discovered to contain a Server-Side Request Forgery SSRF via the component controllers.console.remotefiles.RemoteFileUploadApi. A different vulnerability than CVE-2025-29720...

CVE-2025-56520

Dify v1.6.0 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability within the controllers.console.remote_files.RemoteFileUploadApi component. The root cause is improper validation , which allows an attacker with network access to force the server to make arbitrary requests. This coul...

PT-2025-45252

Name of the Vulnerable Software and Affected Versions Greenify versions prior to 2.3 Description An improper control of filename for include/require statements allows for Local File Inclusion. Unauthenticated attackers can include and execute arbitrary files on the server, which may lead to the...