EUVD-2021-1240

Malware in sbrugna...

EUVD-2021-18805

Malware in sbrugna...

EUVD-2020-30695

Malware in sbrugna...

EUVD-2020-0068

Malware in sbrugna...

EUVD-2022-7628

Malicious code in bioql PyPI...

EUVD-2022-32797

Malicious code in bioql PyPI...

EUVD-2025-21758

Malicious code in bioql PyPI...

EUVD-2022-0964

Malicious code in bioql PyPI...

EUVD-2025-30380

Malicious code in bioql PyPI...

EUVD-2024-43127

Malicious code in bioql PyPI...

EUVD-2023-32435

Malicious code in bioql PyPI...

EUVD-2024-21409

Malicious code in bioql PyPI...

EUVD-2024-2860

Malicious code in bioql PyPI...

EUVD-2024-1440

Malicious code in bioql PyPI...

EUVD-2022-3033

Malicious code in bioql PyPI...

CVE-2025-60249

vulnerability-lookup 2.16.0 allows XSS in bundle.py, comment.py, and user.py, by a user on a vulnerability-lookup instance who can add bundles, comments, or sightings. A cross-site scripting XSS vulnerability was discovered in the handling of user-supplied input in the Bundles, Comments, and...

CVE-2025-60249

CVE-2025-60249 affects vulnerability-lookup 2.16.0 and enables XSS via Bundles, Comments, and Sightings components (bundle.py, comment.py, user.py). The root cause is unsafe handling of user-supplied input, with untrusted data rendered in templates/tables due to innerHTML usage and insufficient v...

PT-2025-39430

Name of the Vulnerable Software and Affected Versions vulnerability-lookup version 2.16.0 Description A cross-site scripting XSS issue exists in the handling of user-supplied input within the Bundles, Comments, and Sightings components of the software. Untrusted data was not properly sanitized...

GHSA-5W3J-GWGH-4RFV H2O affected by a deserialization vulnerability

A deserialization vulnerability exists in h2oai/h2o-3 versions = 3.46.0.7, allowing attackers to read arbitrary system files and execute arbitrary code. The vulnerability arises from improper handling of JDBC connection parameters, which can be exploited by bypassing regular expression checks and...

H2O affected by a deserialization vulnerability

A deserialization vulnerability exists in h2oai/h2o-3 versions = 3.46.0.7, allowing attackers to read arbitrary system files and execute arbitrary code. The vulnerability arises from improper handling of JDBC connection parameters, which can be exploited by bypassing regular expression checks and...