EUVD-2022-1164

Malicious code in bioql PyPI...

EUVD-2021-8679

Malicious code in bioql PyPI...

EUVD-2024-19626

Malicious code in bioql PyPI...

EUVD-2024-49551

Malicious code in bioql PyPI...

EUVD-2024-0894

Malicious code in bioql PyPI...

EUVD-2024-50438

Malicious code in bioql PyPI...

EUVD-2023-1486

Malicious code in bioql PyPI...

EUVD-2022-7221

Malicious code in bioql PyPI...

EUVD-2024-0418

Malicious code in bioql PyPI...

EUVD-2025-5562

Malicious code in bioql PyPI...

EUVD-2022-6852

Malicious code in bioql PyPI...

EUVD-2022-7196

Malicious code in bioql PyPI...

EUVD-2024-33815

Malicious code in bioql PyPI...

EUVD-2024-34558

Malicious code in bioql PyPI...

EUVD-2023-46371

Malicious code in bioql PyPI...

CVE-2023-53158

A flaw was found in gix-transport. The handling of clone URLs by the crate allows an attacker to execute arbitrary commands by injecting a malicious substring into the URL, specifically through the ssh protocol and ProxyCommand option. This vulnerability allows a local attacker to trigger command...

CVE-2025-54414 Anubis accepts crafted redirect URLs in pass-challenge 'Try Again' buttons

Anubis is a Web AI Firewall Utility that weighs the soul of users' connections using one or more challenges in order to protect upstream resources from scraper bots. In versions 1.21.2 and below, attackers can craft malicious pass-challenge pages that cause a user to execute arbitrary JavaScript...

CVE-2025-54310

qBittorrent before 5.1.2 does not prevent access to a local file that is referenced in a link URL. This affects rsswidget.cpp and searchjobwidget.cpp...

CVE-2025-3777

Hugging Face Transformers versions up to 4.49.0 are affected by an improper input validation vulnerability in the imageutils.py file. The vulnerability arises from insecure URL validation using the startswith method, which can be bypassed through URL username injection. This allows attackers to...

CVE-2025-34065

An authentication bypass vulnerability exists in AVTECH IP camera, DVR, and NVR devices’ streamd web server. The strstr function allows unauthenticated access to any request containing "/nobody" in the URL, bypassing login controls...