981 matches found
EUVD-2024-45527
Malicious code in bioql PyPI...
EUVD-2025-20331
Malicious code in bioql PyPI...
EUVD-2021-7609
Malicious code in bioql PyPI...
EUVD-2025-24965
Malicious code in bioql PyPI...
EUVD-2024-42684
Malicious code in bioql PyPI...
EUVD-2024-1815
Malicious code in bioql PyPI...
EUVD-2025-14217
Malicious code in bioql PyPI...
EUVD-2025-7823
Malicious code in bioql PyPI...
EUVD-2025-5968
Malicious code in bioql PyPI...
EUVD-2022-40708
Malicious code in bioql PyPI...
EUVD-2024-45526
Malicious code in bioql PyPI...
EUVD-2024-18056
Malicious code in bioql PyPI...
Out-of-bounds read in HTTP client no_proxy handling
...
CVE-2025-9232
Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'noproxy' environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. Impact summary: An out-of-bounds read can trigger a crash...
CVE-2025-9232 Out-of-bounds read in HTTP client no_proxy handling
Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'noproxy' environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. Impact summary: An out-of-bounds read can trigger a crash...
PT-2025-39988
Name of the Vulnerable Software and Affected Versions OpenSSL versions 3.0.16 through 3.5.0 EDK II affected versions not specified Description An issue has been identified in OpenSSL where an application using the HTTP client API functions may trigger an out-of-bounds read if the no proxy...
VulnCheck KEV: CVE-2025-27915
An issue was discovered in Zimbra Collaboration ZCS 9.0 and 10.0 and 10.1. A stored cross-site scripting XSS vulnerability exists in the Classic Web Client due to insufficient sanitization of HTML content in ICS files. When a user views an e-mail message containing a malicious ICS entry, its...
OpenSSL 3.0.0 < 3.0.18 Multiple Vulnerabilities
The version of OpenSSL installed on the remote host is prior to 3.0.18. It is, therefore, affected by multiple vulnerabilities as referenced in the 3.0.18 advisory. - Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'noproxy'...
Axios Abuse and Salty 2FA Kits Fuel Advanced Microsoft 365 Phishing Attacks
Threat actors are abusing HTTP client tools like Axios in conjunction with Microsoft's Direct Send feature to form a "highly efficient attack pipeline" in recent phishing campaigns, according to new findings from ReliaQuest. "Axios user agent activity surged 241% from June to August 2025, dwarfin...
Lynx WWW client allows a remote attacker to specify command-line parameters which Lynx uses when calling external programs to handle certain protocols, e.g. telnet.
...