EUVD-2022-41585

Malicious code in bioql PyPI...

EUVD-2021-27712

Malicious code in bioql PyPI...

EUVD-2022-28592

Malicious code in bioql PyPI...

EUVD-2023-48806

Malicious code in bioql PyPI...

EUVD-2024-53072

Malicious code in bioql PyPI...

EUVD-2022-15567

Malicious code in bioql PyPI...

EUVD-2024-27297

Malicious code in bioql PyPI...

EUVD-2025-6789

Malicious code in bioql PyPI...

EUVD-2025-10070

Malicious code in bioql PyPI...

EUVD-2024-17537

Malicious code in bioql PyPI...

EUVD-2024-30717

Malicious code in bioql PyPI...

EUVD-2024-2918

Malicious code in bioql PyPI...

EUVD-2024-31750

Malicious code in bioql PyPI...

EUVD-2025-25315

Malicious code in bioql PyPI...

Security Bulletin: Multiple vulnerabilities within WebSphere Application and IBM HTTP Server, affect IBM Tivoli Monitoring.

Summary Multiple vulnerabilities within WebSphere Application and IBM HTTP Server which is included as part of IBM Tivoli Monitoring ITM portal server have been remediated. Vulnerability Details CVEID:CVE-2025-48976 DESCRIPTION: Allocation of resources for multipart headers with insufficient limi...

CVE-2025-55971

TCL 65C655 Smart TV, running firmware version V8-R75PT01-LF1V269.001116 Android TV, Kernel 5.4.242+, is vulnerable to a blind, unauthenticated Server-Side Request Forgery SSRF vulnerability via the UPnP MediaRenderer service AVTransport:1. The device accepts unauthenticated SetAVTransportURI SOAP...

CVE-2025-54087

CVE-2025-54087 is a server-side request forgery vulnerability in Secure Access prior to version 14.10. Attackers with administrative privileges can publish a crafted test HTTP request originating from the Secure Access server. The attack complexity is high, there are no attack requirements, and...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF. An attacker can access internal resources, exfiltrate sensitive information, or perform unauthorized actions by sending crafted requests to internal or protected endpoints. Note: This is only exploitabl...

CVE-2025-20371

In Splunk Enterprise versions below 10.0.1, 9.4.4, 9.3.6 and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.109, 9.3.2408.119 and 9.2.2406.122, an unauthenticated attacker could trigger a blind server-side request forgery SSRF potentially letting an attacker perform REST API calls on...

CVE-2025-20371

In Splunk Enterprise versions below 10.0.1, 9.4.4, 9.3.6 and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.109, 9.3.2408.119 and 9.2.2406.122, an unauthenticated attacker could trigger a blind server-side request forgery SSRF potentially letting an attacker perform REST API calls on...