EUVD-2022-51684

Malicious code in bioql PyPI...

EUVD-2025-18866

Malicious code in bioql PyPI...

EUVD-2022-27915

Malicious code in bioql PyPI...

EUVD-2023-29504

Malicious code in bioql PyPI...

EUVD-2023-2224

Malicious code in bioql PyPI...

EUVD-2025-25661

Malicious code in bioql PyPI...

EUVD-2023-58911

Malicious code in bioql PyPI...

EUVD-2024-26084

Malicious code in bioql PyPI...

EUVD-2021-8205

Malicious code in bioql PyPI...

EUVD-2024-34248

Malicious code in bioql PyPI...

EUVD-2022-34069

Malicious code in bioql PyPI...

EUVD-2022-55298

Malicious code in bioql PyPI...

EUVD-2023-44652

Malicious code in bioql PyPI...

EUVD-2025-4440

Malicious code in bioql PyPI...

EUVD-2025-32091

Malicious code in bioql PyPI...

FreeBSD : fetchmail -- potential crash when authenticating to SMTP server (21fba35e-a05f-11f0-a8b8-a1ef31191bc1)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 21fba35e-a05f-11f0-a8b8-a1ef31191bc1 advisory. Matthias Andree reports: fetchmail's SMTP client, when configured to authenticate, is susceptible to a...

CVE-2025-61604 WeGIA: Cross-Site Request Forgery (CSRF) Vulnerability in `control.php` Endpoint

WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain a Cross-Site Request Forgery CSRF vulnerability. The delete operation for the Almoxarifado entity is exposed via HTTP GET without CSRF protection, allowing a third-party site to trigger...

netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions

A flaw in Netty’s HTTP/1.1 chunked encoding parser allows newline LF characters in chunk extensions to be incorrectly treated as the end of the chunk-size line instead of requiring the proper CRLF sequence. This discrepancy can be exploited in rare cases where a reverse proxy interprets the same...

netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability

A flaw was found in Netty where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the "MadeYouReset" attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts...

netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability

A flaw was found in Netty where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the "MadeYouReset" attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts...