EUVD-2013-6447

Malware in sbrugna...

EUVD-2004-0169

Malware in sbrugna...

EUVD-2016-7714

Malware in sbrugna...

EUVD-2018-8506

Malware in sbrugna...

EUVD-2022-26162

Malicious code in bioql PyPI...

EUVD-2024-34655

Malicious code in bioql PyPI...

EUVD-2022-25475

Malicious code in bioql PyPI...

EUVD-2024-34656

Malicious code in bioql PyPI...

EUVD-2024-40439

Malicious code in bioql PyPI...

EUVD-2025-7754

Malicious code in bioql PyPI...

EUVD-2022-28289

Malicious code in bioql PyPI...

EUVD-2024-23292

Malicious code in bioql PyPI...

EUVD-2024-34657

Malicious code in bioql PyPI...

EUVD-2024-39345

Malicious code in bioql PyPI...

CVE-2025-55194

Part-DB is an open source inventory management system for electronic components. Prior to version 1.17.3, any authenticated user can upload a profile picture with a misleading file extension e.g., .jpg.txt, resulting in a persistent 500 Internal Server Error when attempting to view or edit that...

CVE-2025-43580 Audition | Access of Memory Location After End of Buffer (CWE-788)

Audition versions 25.2, 24.6.3 and earlier are affected by an Access of Memory Location After End of Buffer vulnerability that could result in application denial-of-service. An attacker could leverage this vulnerability to crash the application or disrupt its functionality. Exploitation of this...

CVE-2025-31482

FreshRSS is a self-hosted RSS feed aggregator. A vulnerability in versions prior to 1.26.2 causes a user to be repeatedly logged out after fetching a malicious feed entry, effectively causing that user to suffer denial of service. Version 1.26.2 contains a patch for the issue...

KLA84380 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, perform cross-site scripting attack, spoof user interface, cause denial of service. Below is a complete list of vulnerabilities: 1...

CVE-2024-25996

An unauthenticated remote attacker can perform a remote code execution due to an origin validation error. The access is limited to the service user...

CVE-2024-46894

A vulnerability has been identified in SINEC INS All versions V1.0 SP2 Update 3. The affected application does not properly validate authorization of a user to query the "/api/sftp/users" endpoint. This could allow an authenticated remote attacker to gain knowledge about the list of configured...