EUVD-2022-52430

Malicious code in bioql PyPI...

EUVD-2025-19653

Malicious code in bioql PyPI...

EUVD-2023-53992

Malicious code in bioql PyPI...

EUVD-2025-14675

Malicious code in bioql PyPI...

EUVD-2025-19235

Malicious code in bioql PyPI...

EUVD-2022-53084

Malicious code in bioql PyPI...

EUVD-2022-48709

Malicious code in bioql PyPI...

EUVD-2023-1657

Malicious code in bioql PyPI...

EUVD-2022-51684

Malicious code in bioql PyPI...

EUVD-2022-37764

Malicious code in bioql PyPI...

EUVD-2023-53991

Malicious code in bioql PyPI...

EUVD-2023-41813

Malicious code in bioql PyPI...

EUVD-2023-47095

Malicious code in bioql PyPI...

EUVD-2025-3158

Malicious code in bioql PyPI...

EUVD-2024-33486

Malicious code in bioql PyPI...

EUVD-2022-37004

Malicious code in bioql PyPI...

CVE-2025-10752 OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Cross-Site Request Forgery

The OAuth Single Sign On – SSO OAuth Client plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.26.12. This is due to using a predictable state parameter base64 encoded app name without any randomness in the OAuth flow. This makes it possible f...

CVE-2025-58447 rAthena has heap-based buffer overflow in login server

rAthena is an open-source cross-platform massively multiplayer online role playing game MMORPG server. Versions prior to commit 2f5248b have a heap-based buffer overflow in the login server, remote attacker to overwrite adjacent session fields by sending a crafted CASSOLOGINREQ with an oversized...

Metabase 0.41.x < 0.41.9 / 0.42.x < 0.42.6 / 0.43.x < 0.43.7 / 0.44.x < 0.44.5 / 1.41.x < 1.41.9 / 1.42.x < 1.42.6 / 1.43.x < 1.43.7 / 1.44.x < 1.44.5

The version of Metabase installed on the remote host affected by a single sign on SSO access control vulnerability which could allow a user access without going through the SSO IdP. Metabase now blocks password reset for all users who use SSO for their Metabase login. Note that Nessus has not...

CVE-2025-57815

Fides is an open-source privacy engineering platform. Prior to version 2.69.1, the Fides Admin UI login endpoint relies on a general IP-based rate limit for all API traffic and lacks specific anti-automation controls designed to protect against brute-force attacks. This could allow attackers to...