EUVD-2022-24730

Malicious code in bioql PyPI...

EUVD-2024-17287

Malicious code in bioql PyPI...

EUVD-2024-47544

Malicious code in bioql PyPI...

EUVD-2024-26908

Malicious code in bioql PyPI...

EUVD-2022-51562

Malicious code in bioql PyPI...

EUVD-2024-29794

Malicious code in bioql PyPI...

EUVD-2022-46566

Malicious code in bioql PyPI...

EUVD-2021-9410

Malicious code in bioql PyPI...

EUVD-2022-0700

Malicious code in bioql PyPI...

EUVD-2022-5688

Malicious code in bioql PyPI...

EUVD-2022-7224

Malicious code in bioql PyPI...

EUVD-2024-18855

Malicious code in bioql PyPI...

EUVD-2023-58626

Malicious code in bioql PyPI...

EUVD-2025-8409

Malicious code in bioql PyPI...

Auth0 Wordpress plugin Does Not Properly Handle File Types in Bulk User Import

Overview In applications built with the Auth0-PHP SDK, the Bulk User Import endpoint does not validate the file path wrapper or value. Without proper validation, affected applications may accept arbitrary file paths or URLs. Am I affected? You are affected by this vulnerability if you meet the...

BIT-GITLAB-2025-5069 Incorrect Ownership Assignment in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 17.10 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that could have allowed an authenticated user to gain unauthorized access to confidential issues by creating a project with an identical name to the victim's...

AZL-67850 CVE-2025-59362 affecting package squid for versions less than 6.13-3

Squid through 7.1 mishandles ASN.1 encoding of long SNMP OIDs. This occurs in asnbuildobjid in lib/snmplib/asn1.c...

PT-2025-37567

Name of the Vulnerable Software and Affected Versions Temporal Server versions prior to 1.26.3 Temporal Server versions prior to 1.27.3 Temporal Server versions prior to 1.28.1 Description Insufficiently specific bounds checking on the authorization header could lead to denial of service in the...

CVE-2025-48040 Malicious Key Exchange Messages may Lead to Excessive Resource Consumption

Uncontrolled Resource Consumption vulnerability in Erlang OTP ssh sshsftp modules allows Excessive Allocation, Flooding. This vulnerability is associated with program files lib/ssh/src/sshsftpd.erl. This issue affects OTP from OTP 17.0 until OTP 28.0.3, OTP 27.3.4.3 and 26.2.5.15 corresponding to...

CVE-2025-1740 Authentication Bypass in Akinsoft's MyRezzta

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft MyRezzta allows Authentication Bypass, Password Recovery Exploitation, Brute Force. This issue affects MyRezzta: from s2.03.01 before v2.05.01...