EUVD-2024-54627

Malicious code in bioql PyPI...

EUVD-2022-42254

Malicious code in bioql PyPI...

EUVD-2023-1497

Malicious code in bioql PyPI...

EUVD-2024-54629

Malicious code in bioql PyPI...

EUVD-2024-54595

Malicious code in bioql PyPI...

EUVD-2024-54628

Malicious code in bioql PyPI...

EUVD-2025-30912

Malicious code in bioql PyPI...

EUVD-2025-30893

Malicious code in bioql PyPI...

EUVD-2025-5121

Malicious code in bioql PyPI...

EUVD-2024-54612

Malicious code in bioql PyPI...

EUVD-2022-4347

Malicious code in bioql PyPI...

EUVD-2023-3188

Malicious code in bioql PyPI...

EUVD-2024-16188

Malicious code in bioql PyPI...

EUVD-2024-17193

Malicious code in bioql PyPI...

GHSA-W82P-R9VW-4RG5 WSO2's Input Validation Management Service contains Observable Discrepancy when Multi-Attribute Login is enabled

A username enumeration vulnerability exists in multiple WSO2 products when Multi-Attribute Login is enabled. In this configuration, the system returns a distinct "User does not exist" error message to the login form, regardless of the validateusername setting. This behavior allows malicious actor...

CVE-2025-1862

An arbitrary file upload vulnerability exists in multiple WSO2 products due to improper validation of user-supplied filenames in the BPEL uploader SOAP service endpoint. A malicious actor with administrative privileges can upload arbitrary files to a user-controlled location on the server. By...

CVE-2025-1862

An arbitrary file upload vulnerability exists in multiple WSO2 products due to improper validation of user-supplied filenames in the BPEL uploader SOAP service endpoint. A malicious actor with administrative privileges can upload arbitrary files to a user-controlled location on the server. By...

CVE-2025-1862 Authenticated Arbitrary File Upload in Multiple WSO2 Products via BPEL Uploader SOAP Service Leading to Remote Code Execution

An arbitrary file upload vulnerability exists in multiple WSO2 products due to improper validation of user-supplied filenames in the BPEL uploader SOAP service endpoint. A malicious actor with administrative privileges can upload arbitrary files to a user-controlled location on the server. By...

CVE-2025-1862

The CVE-2025-1862 entry concerns WSO2 products with an arbitrary file upload vulnerability in the BPEL uploader SOAP service endpoint caused by improper validation of user-supplied filenames. The flaw allows an authenticated attacker (with administrative privileges) to upload files to a server-co...

CVE-2025-1396 Username Enumeration in Multiple WSO2 Products with Multi-Attribute Login Enabled

A username enumeration vulnerability exists in multiple WSO2 products when Multi-Attribute Login is enabled. In this configuration, the system returns a distinct "User does not exist" error message to the login form, regardless of the validateusername setting. This behavior allows malicious actor...