EUVD-2025-4935

Malicious code in bioql PyPI...

EUVD-2025-27598

Malicious code in bioql PyPI...

EUVD-2021-29518

Malicious code in bioql PyPI...

EUVD-2025-26202

Malicious code in bioql PyPI...

EUVD-2024-16913

Malicious code in bioql PyPI...

EUVD-2024-50357

Malicious code in bioql PyPI...

EUVD-2025-23011

Malicious code in bioql PyPI...

EUVD-2022-32064

Malicious code in bioql PyPI...

EUVD-2023-26500

Malicious code in bioql PyPI...

EUVD-2023-43639

Malicious code in bioql PyPI...

EUVD-2025-5383

Malicious code in bioql PyPI...

EUVD-2023-36796

Malicious code in bioql PyPI...

PT-2025-40323

Name of the Vulnerable Software and Affected Versions Ajax WooSearch WordPress plugin versions through 1.0.0 Description The Ajax WooSearch WordPress plugin does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action. This allows for SQL injection by...

CVE-2025-7052 LatePoint <= 5.1.94 - Cross-Site Request Forgery to Account Takeover via change_password() Function

The LatePoint plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.1.94. This is due to missing nonce validation on the changepassword function of its customercabinetchangepassword AJAX route. The plugin hooks this endpoint via wpajax and...

CVE-2025-36274

IBM Aspera HTTP Gateway 2.0.0 through 2.3.1 stores sensitive information in clear text in easily obtainable files which can be read by an unauthenticated user...

Zoom Workplace < 6.5.0 Vulnerability (ZSB-25033)

The version of Zoom Workplace installed on the remote host is prior to 6.5.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-25033 advisory. - Uncontrolled resource consumption in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of servi...

CVE-2025-37122

A vulnerability in the web-based management interface of network access control services could allow an unauthenticated remote attacker to conduct a Reflected Cross-Site Scripting XSS attack. Successful exploitation could allow an attacker to execute arbitrary JavaScript code in a victim's browse...

CVE-2025-49461

Cross-site scripting in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access...

CVE-2025-8696

If an unauthenticated user sends a large amount of data to the Stork UI, it may cause memory and disk use problems for the system running the Stork server. This issue affects Stork versions 1.0.0 through 2.3.0...

CVE-2025-8696 DoS attack against the Stork UI from an unauthenticated user

If an unauthenticated user sends a large amount of data to the Stork UI, it may cause memory and disk use problems for the system running the Stork server. This issue affects Stork versions 1.0.0 through 2.3.0...