EUVD-2025-30511

Malicious code in bioql PyPI...

EUVD-2025-30936

Malicious code in bioql PyPI...

EUVD-2025-24244

Malicious code in bioql PyPI...

EUVD-2025-25738

Malicious code in bioql PyPI...

EUVD-2025-27724

Malicious code in bioql PyPI...

EUVD-2025-27130

Malicious code in bioql PyPI...

EUVD-2021-33175

Malicious code in bioql PyPI...

EUVD-2025-30369

Malicious code in bioql PyPI...

EUVD-2025-28827

Malicious code in bioql PyPI...

EUVD-2025-28115

Malicious code in bioql PyPI...

EUVD-2022-0039

Malicious code in bioql PyPI...

EUVD-2025-25041

Malicious code in bioql PyPI...

EUVD-2025-30371

Malicious code in bioql PyPI...

Exploit for CVE-2014-3566

POODLE Attack Proof of Concept A complete demonstration envir...

Exploit for CVE-2025-37947

This is a PoC exploit for CVE-2025-37947, a vulnerability in the...

CVE-2025-61604

WeGIA CSRF in delete operation (Almoxarifado) affects versions 3.4.12 and earlier of WeGIA, where the delete endpoint is exposed via HTTP GET without CSRF protection, allowing an attacker to trigger actions using a victim’s authenticated session. This vulnerability is fixed in version 3.5.0. Impa...

SUSE SLES15 / openSUSE 15 Security Update : nginx (SUSE-SU-2025:03444-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03444-1 advisory. - CVE-2025-53859:?the server side may leak arbitrary bytes during the NGINX SMTP authentication process bsc1248070. ...

PT-2025-40424

Name of the Vulnerable Software and Affected Versions WeGIA versions 3.4.12 and below Description WeGIA is a Web manager for charitable institutions. A SQL Injection issue exists in the /controle/control.php endpoint, specifically in the descricao parameter. This allows attackers to execute...

CVE-2025-56154

htmly v3.0.8 is vulnerable to Cross Site Scripting (XSS) in the /author/:name endpoint. The name parameter is not properly sanitized before reflecting in the HTML response, enabling injection of arbitrary JavaScript. The CVE description confirms the affected software and the vulnerability locatio...

CVE-2025-54811 OpenPLC_V3

OpenPLCV3 has a vulnerability in the enipThread function that occurs due to the lack of a return value. This leads to a crash when the server loop ends and execution hits an illegal ud2 instruction. This issue can be triggered remotely without authentication by starting the same server multiple...