EUVD-2024-45355

Malicious code in bioql PyPI...

EUVD-2025-19380

Malicious code in bioql PyPI...

EUVD-2023-31670

Malicious code in bioql PyPI...

EUVD-2025-16429

Malicious code in bioql PyPI...

EUVD-2022-42489

Malicious code in bioql PyPI...

EUVD-2022-49509

Malicious code in bioql PyPI...

EUVD-2022-27434

Malicious code in bioql PyPI...

CVE-2025-54782

CVE-2025-54782 affects the NestJS devtools-integration package (versions 0.2.0 and earlier). The vulnerability enables Remote Code Execution via a local development HTTP server endpoint, /inspector/graph/interact, which accepts JSON containing a code field and executes it in a Node.js vm.runInNew...

CVE-2025-43275

A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to break out of its sandbox...

PT-2025-31334 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.6 macOS versions prior to 14.7.7 macOS versions prior to 13.7.7 Description: A permissions issue was addressed with additional restrictions. An app may be able to break out of its sandbox. Recommendations: Update to...

TencentOS Server 3: python-jinja2 (TSSA-2025:0305)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0305 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

CVE-2025-5874

A vulnerability was found in Redash up to 10.1.0/25.1.0. It has been rated as problematic. This issue affects the function runquery of the file /queryrunner/python.py of the component getattr Handler. The manipulation leads to sandbox issue. The complexity of an attack is rather high. The...

CVE-2025-5959

Type Confusion in V8 in Google Chrome prior to 137.0.7151.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2025-5874

A vulnerability was found in Redash up to 10.1.0/25.1.0. It has been rated as problematic. This issue affects the function runquery of the file /queryrunner/python.py of the component getattr Handler. The manipulation leads to sandbox issue. The complexity of an attack is rather high. The...

CVE-2025-5874 Redash getattr python.py run_query sandbox

A vulnerability was found in Redash up to 10.1.0/25.1.0. It has been rated as problematic. This issue affects the function runquery of the file /queryrunner/python.py of the component getattr Handler. The manipulation leads to sandbox issue. The complexity of an attack is rather high. The...

CVE-2025-5874

CVE-2025-5874 affects Redash, up to versions 10.1.0/25.1.0, via the getattr Handler’s run_query function in /query_runner/python.py, causing a sandbox issue. The exploitability is reported as high complexity with public PoC evidence; exploitation maturity is noted as proof-of-concept. The vendor ...

CVE-2025-5321

A vulnerability classified as critical was found in aimhubio aim up to 3.29.1. This vulnerability affects the function RestrictedPythonQuery of the file /aim/storage/query.py of the component runview Object Handler. The manipulation of the argument Abfrage leads to erweiterte Rechte. The attack c...

CVE-2025-31189

CVE-2025-31189 describes a file quarantine bypass in macOS that could allow a sandboxed app to break out of its sandbox. The issue is fixed in macOS releases: Ventura 13.7.5, Sequoia 15.4, and Sonoma 14.7.5. The CVE is rated with a high impact and a local attack vector, requiring user interaction...

CVE-2025-5321

A vulnerability classified as critical was found in aimhubio aim up to 3.29.1. This vulnerability affects the function RestrictedPythonQuery of the file /aim/storage/query.py of the component runview Object Handler. The manipulation of the argument Abfrage leads to erweiterte Rechte. The attack c...

CVE-2025-5321 aimhubio aim run_view Object query.py RestrictedPythonQuery privilege escalation

A vulnerability classified as critical was found in aimhubio aim up to 3.29.1. This vulnerability affects the function RestrictedPythonQuery of the file /aim/storage/query.py of the component runview Object Handler. The manipulation of the argument Abfrage leads to erweiterte Rechte. The attack c...