EUVD-2025-23695

Malicious code in bioql PyPI...

EUVD-2025-23693

Malicious code in bioql PyPI...

EUVD-2021-28868

Malicious code in bioql PyPI...

EUVD-2021-7161

Malicious code in bioql PyPI...

EUVD-2025-2459

Malicious code in bioql PyPI...

EUVD-2023-51300

Malicious code in bioql PyPI...

EUVD-2022-29980

Malicious code in bioql PyPI...

EUVD-2021-27596

Malicious code in bioql PyPI...

EUVD-2023-53776

Malicious code in bioql PyPI...

EUVD-2021-32592

Malicious code in bioql PyPI...

EUVD-2025-19677

Malicious code in bioql PyPI...

EUVD-2022-32983

Malicious code in bioql PyPI...

EUVD-2023-38511

Malicious code in bioql PyPI...

EUVD-2024-42679

Malicious code in bioql PyPI...

CVE-2025-56513

NiceHash QuickMiner 6.12.0 perform software updates over HTTP without validating digital signatures or hash checks. An attacker capable of intercepting or redirecting traffic to the update url and can hijack the update process and deliver arbitrary executables that are automatically executed,...

CVE-2025-55795

The openml/openml.org web application version v2.0.20241110 uses incremental user IDs and insufficient email ownership verification during email update workflows. An authenticated attacker controlling a user account with a lower user ID can update their email address to that of another user with ...

CVE-2025-55795

OpenML OpenML.org web app v2.0.20241110 is affected by CVE-2025-55795 due to incremental user IDs and insufficient email ownership verification during email updates. An authenticated attacker with a lower user ID can reassign their email to a higher-ID user, causing the victim to be locked out an...

SuperMicro MBD-X13SEM-F 安全漏洞

The SuperMicro MBD-X13SEM-F is a server motherboard from SuperMicro, Inc. A security vulnerability exists in the SuperMicro MBD-X13SEM-F that stems from a flaw in the BMC firmware validation logic, which could result in a specially crafted image updating the system firmware...

CVE-2025-41051

A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'dataAddonlayouts' and 'dataAddonlayoutsexcept' parameters in /apprain/developer/addons/update/bootstrap...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the dataAddonlayouts and dataAddonlayoutsexcept parameters in the /apprain/developer/addons/update/960grid process. An attacker can execute arbitrary scripts in the context of a user's browser by submitting...