EUVD-2025-22939

Malicious code in bioql PyPI...

EUVD-2023-38468

Malicious code in bioql PyPI...

EUVD-2023-51278

Malicious code in bioql PyPI...

EUVD-2025-1491

Malicious code in bioql PyPI...

EUVD-2022-4827

Malicious code in bioql PyPI...

EUVD-2024-3152

Malicious code in bioql PyPI...

EUVD-2024-34474

Malicious code in bioql PyPI...

EUVD-2021-30852

Malicious code in bioql PyPI...

EUVD-2025-20871

Malicious code in bioql PyPI...

EUVD-2025-3686

Malicious code in bioql PyPI...

EUVD-2024-29108

Malicious code in bioql PyPI...

EUVD-2024-3554

Malicious code in bioql PyPI...

UBUNTU-CVE-2025-54289

Privilege Escalation in operations API in Canonical LXD 6.5 on multiple platforms allows attacker with read permissions to hijack terminal or console sessions and execute arbitrary commands via WebSocket connection hijacking format...

CVE-2025-54289: Missing Origin Validation in WebSockets

Privilege Escalation in operations API in Canonical LXD 6.5 on multiple platforms allows attacker with read permissions to hijack terminal or console sessions and execute arbitrary commands via WebSocket connection hijacking format...

GE S2020/S2020G Fast Switch 61850 Improper Neutralization of Input During Web Page Generation (CVE-2019-18267)

An issue was found in GE S2020/S2020G Fast Switch 61850, S2020/S2020G Fast Switch 61850 Versions 07A03 and prior. An attacker can inject arbitrary Javascript in a specially crafted HTTP request that may be reflected back in the HTTP response. The device is also vulnerable to a stored cross-site...

CVE-2025-54592

FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below do not properly terminate the session during logout. After a user logs out, the session cookie remains active and unchanged. The unchanged cookie could be reused by an attacker if a new session were to be started. This...

CVE-2025-54592 FreshRSS has Incomplete Session Termination on Logout

FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below do not properly terminate the session during logout. After a user logs out, the session cookie remains active and unchanged. The unchanged cookie could be reused by an attacker if a new session were to be started. This...

CVE-2025-54592

Vulnerability overview: FreshRSS

CVE-2025-54592 FreshRSS has Incomplete Session Termination on Logout

FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below do not properly terminate the session during logout. After a user logs out, the session cookie remains active and unchanged. The unchanged cookie could be reused by an attacker if a new session were to be started. This...

CVE-2025-54592 FreshRSS has Incomplete Session Termination on Logout

FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below do not properly terminate the session during logout. After a user logs out, the session cookie remains active and unchanged. The unchanged cookie could be reused by an attacker if a new session were to be started. This...