EUVD-2025-6787

Malicious code in bioql PyPI...

EUVD-2025-1703

Malicious code in bioql PyPI...

EUVD-2025-2745

Malicious code in bioql PyPI...

EUVD-2024-2918

Malicious code in bioql PyPI...

EUVD-2025-12344

Malicious code in bioql PyPI...

EUVD-2025-2257

Malicious code in bioql PyPI...

EUVD-2024-1024

Malicious code in bioql PyPI...

EUVD-2025-23560

Malicious code in bioql PyPI...

EUVD-2025-12061

Malicious code in bioql PyPI...

EUVD-2025-17640

Malicious code in bioql PyPI...

EUVD-2023-44755

Malicious code in bioql PyPI...

EUVD-2021-27779

Malicious code in bioql PyPI...

EUVD-2024-0070

Malicious code in bioql PyPI...

EUVD-2025-12030

Malicious code in bioql PyPI...

EUVD-2022-1524

Malicious code in bioql PyPI...

EUVD-2024-53433

Malicious code in bioql PyPI...

Security Bulletin: Multiple vulnerabilities within WebSphere Application and IBM HTTP Server, affect IBM Tivoli Monitoring.

Summary Multiple vulnerabilities within WebSphere Application and IBM HTTP Server which is included as part of IBM Tivoli Monitoring ITM portal server have been remediated. Vulnerability Details CVEID:CVE-2025-48976 DESCRIPTION: Allocation of resources for multipart headers with insufficient limi...

CVE-2025-55971

TCL 65C655 Smart TV, running firmware version V8-R75PT01-LF1V269.001116 Android TV, Kernel 5.4.242+, is vulnerable to a blind, unauthenticated Server-Side Request Forgery SSRF vulnerability via the UPnP MediaRenderer service AVTransport:1. The device accepts unauthenticated SetAVTransportURI SOAP...

CVE-2025-54087

CVE-2025-54087 is a server-side request forgery vulnerability in Secure Access prior to version 14.10. Attackers with administrative privileges can publish a crafted test HTTP request originating from the Secure Access server. The attack complexity is high, there are no attack requirements, and...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF. An attacker can access internal resources, exfiltrate sensitive information, or perform unauthorized actions by sending crafted requests to internal or protected endpoints. Note: This is only exploitabl...