EUVD-2021-7765

Malicious code in bioql PyPI...

EUVD-2023-53164

Malicious code in bioql PyPI...

EUVD-2021-9195

Malicious code in bioql PyPI...

EUVD-2022-2661

Malicious code in bioql PyPI...

EUVD-2025-6063

Malicious code in bioql PyPI...

EUVD-2025-20010

Malicious code in bioql PyPI...

EUVD-2025-0161

Malicious code in bioql PyPI...

EUVD-2025-12061

Malicious code in bioql PyPI...

EUVD-2022-52760

Malicious code in bioql PyPI...

EUVD-2025-7318

Malicious code in bioql PyPI...

EUVD-2025-3893

Malicious code in bioql PyPI...

EUVD-2025-21133

Malicious code in bioql PyPI...

EUVD-2022-41585

Malicious code in bioql PyPI...

EUVD-2024-41068

Malicious code in bioql PyPI...

EUVD-2022-32395

Malicious code in bioql PyPI...

EUVD-2022-40932

Malicious code in bioql PyPI...

Security Bulletin: Multiple vulnerabilities within WebSphere Application and IBM HTTP Server, affect IBM Tivoli Monitoring.

Summary Multiple vulnerabilities within WebSphere Application and IBM HTTP Server which is included as part of IBM Tivoli Monitoring ITM portal server have been remediated. Vulnerability Details CVEID:CVE-2025-48976 DESCRIPTION: Allocation of resources for multipart headers with insufficient limi...

CVE-2025-55971

TCL 65C655 Smart TV, running firmware version V8-R75PT01-LF1V269.001116 Android TV, Kernel 5.4.242+, is vulnerable to a blind, unauthenticated Server-Side Request Forgery SSRF vulnerability via the UPnP MediaRenderer service AVTransport:1. The device accepts unauthenticated SetAVTransportURI SOAP...

CVE-2025-54087

CVE-2025-54087 is a server-side request forgery vulnerability in Secure Access prior to version 14.10. Attackers with administrative privileges can publish a crafted test HTTP request originating from the Secure Access server. The attack complexity is high, there are no attack requirements, and...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF. An attacker can access internal resources, exfiltrate sensitive information, or perform unauthorized actions by sending crafted requests to internal or protected endpoints. Note: This is only exploitabl...