EUVD-2023-36918

Malicious code in bioql PyPI...

EUVD-2024-16109

Malicious code in bioql PyPI...

EUVD-2023-51177

Malicious code in bioql PyPI...

EUVD-2023-36161

Malicious code in bioql PyPI...

EUVD-2024-23427

Malicious code in bioql PyPI...

EUVD-2021-30669

Malicious code in bioql PyPI...

EUVD-2025-17664

Malicious code in bioql PyPI...

EUVD-2022-51184

Malicious code in bioql PyPI...

EUVD-2024-33581

Malicious code in bioql PyPI...

EUVD-2022-31412

Malicious code in bioql PyPI...

EUVD-2025-24235

Malicious code in bioql PyPI...

EUVD-2022-34390

Malicious code in bioql PyPI...

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling due to improper parsing of the HTTP trailer section in the parse function. An attacker can bypass security controls, launch targeted attacks against users, or poison web caches by crafting specially formed HTTP...

fleetdeck-poc

FleetDeck PoC !Go Versionhttps://img.shields.io/badge/go-...

CVE-2025-57804

CVE-2025-57804 affects the Python package h2 (HTTP/2 protocol stack). Prior to version 4.3.0, it allows HTTP/2 request splitting via CRLF injection in headers when servers downgrade HTTP/2 requests to HTTP/1.1 without validating header names/values. This can enable attackers to manipulate request...

The vulnerability in the management of FortiOS operating systems and FortiProxy proxy servers, related to improper security checks for standard elements, allows attackers to bypass existing security restrictions.

The vulnerability in the management of FortiOS operating systems and FortiProxy proxy servers for protecting against Internet attacks is related to improper security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to circumvent existing security restriction...

CVE-2025-50850

An issue was discovered in CS Cart 4.18.3 allows the vendor login functionality lacks essential security controls such as CAPTCHA verification and rate limiting. This allows an attacker to systematically attempt various combinations of usernames and passwords brute-force attack to gain unauthoriz...

CVE-2025-50850

An issue was discovered in CS Cart 4.18.3 allows the vendor login functionality lacks essential security controls such as CAPTCHA verification and rate limiting. This allows an attacker to systematically attempt various combinations of usernames and passwords brute-force attack to gain unauthoriz...

PT-2025-31554 · Cs Cart · Cs-Cart

Name of the Vulnerable Software and Affected Versions: CS Cart version 4.18.3 Description: The vendor login functionality lacks essential security controls, such as CAPTCHA verification and rate limiting. This allows an attacker to systematically attempt various combinations of usernames and...

CVE-2025-50850

CS Cart 4.18.3 contains a login vulnerability where the vendor login endpoint lacks CAPTCHA verification and rate limiting, enabling brute-force attempts to gain unauthorized vendor access. The confirmed details indicate the issue stems from missing security controls on the login functionality, w...