CVE-2025-6075 Quadratic complexity in os.path.expandvars() with user-controlled template

If the value passed to os.path.expandvars is user-controlled a performance degradation is possible when expanding environment variables...

EUVD-2019-17243

Malware in sbrugna...

EUVD-2019-1089

Malware in sbrugna...

EUVD-2021-16153

Malware in sbrugna...

EUVD-2019-2427

Malware in sbrugna...

EUVD-2023-12123

Malicious code in bioql PyPI...

EUVD-2025-6913

Malicious code in bioql PyPI...

EUVD-2025-22914

Malicious code in bioql PyPI...

EUVD-2024-21308

Malicious code in bioql PyPI...

EUVD-2022-51299

Malicious code in bioql PyPI...

EUVD-2023-58666

Malicious code in bioql PyPI...

EUVD-2023-58671

Malicious code in bioql PyPI...

EUVD-2024-17276

Malicious code in bioql PyPI...

EUVD-2022-27675

Malicious code in bioql PyPI...

EUVD-2023-58661

Malicious code in bioql PyPI...

EUVD-2023-58665

Malicious code in bioql PyPI...

EUVD-2025-10923

Malicious code in bioql PyPI...

EUVD-2025-21075

Malicious code in bioql PyPI...

CVE-2025-34228

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 VA/SaaS deployments contain a server-side request forgery SSRF vulnerability. The /var/www/app/consolerelease/lexmark/update.php script is reachable from the internet...

CVE-2025-55346 Unintended dynamic code execution leads to remote code execution by network attackers

User-controlled input flows to an unsafe implementation of a dynamic Function constructor, allowing network attackers to run arbitrary unsandboxed JS code in the context of the host, by sending a simple POST request...