EUVD-2023-2605

Malicious code in bioql PyPI...

EUVD-2024-1136

Malicious code in bioql PyPI...

EUVD-2023-3265

Malicious code in bioql PyPI...

EUVD-2024-0701

Malicious code in bioql PyPI...

EUVD-2023-33018

Malicious code in bioql PyPI...

EUVD-2023-50915

Malicious code in bioql PyPI...

EUVD-2024-54505

Malicious code in bioql PyPI...

EUVD-2023-46373

Malicious code in bioql PyPI...

CVE-2025-9539

CVE-2025-9539 involves the WordPress plugin AutomatorWP ( Automator plugin for no-code automations, webhooks & custom integrations ) with a missing authorization check in the automatorwp_ajax_import_automation_from_url function. The vulnerability allows authenticated attackers with Subscriber-lev...

CVE-2025-58445

Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. All versions of Atlantis publicly expose detailed version information through its /status endpoint. This information disclosure could allow attackers to identify and target known...

CVE-2025-58445 Atlantis Exposes Service Version Publicly on /status API Endpoint

Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. All versions of Atlantis publicly expose detailed version information through its /status endpoint. This information disclosure could allow attackers to identify and target known...

PT-2025-36399

Name of the Vulnerable Software and Affected Versions Atlantis affected versions not specified Description Atlantis, a self-hosted golang application that listens for Terraform pull request events via webhooks, exposes detailed version information through the /status endpoint. This information...

Moderate: Red Hat Security Advisory: Satellite 6.16.5.3 Async Update

A new release is now available for Red Hat Satellite 6.16 for RHEL 8 and 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

CVE-2025-9799 Langfuse Webhook promptRouter.ts promptChangeEventSourcing server-side request forgery

A security flaw has been discovered in Langfuse up to 3.88.0. Affected by this vulnerability is the function promptChangeEventSourcing of the file web/src/features/prompts/server/routers/promptRouter.ts of the component Webhook Handler. Performing manipulation results in server-side request...

Malicious code in monolith-twirp-webhooks-core (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2ce839cee3a269944cf305057d6746895eb15dec90dbbe6dd48210569287082d The OpenSSF Package Analysis project identified 'monolith-twirp-webhooks-core' @ 1.7.0 rubygems as malicious. It is considered malicious because...

MAL-2025-46958 Malicious code in monolith-twirp-webhooks-core (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2ce839cee3a269944cf305057d6746895eb15dec90dbbe6dd48210569287082d The OpenSSF Package Analysis project identified 'monolith-twirp-webhooks-core' @ 1.7.0 rubygems as malicious. It is considered malicious because...

Linux Distros Unpatched Vulnerability : CVE-2021-22214

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab CE/EE affecting all versions starting from...

Linux Distros Unpatched Vulnerability : CVE-2021-22175

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab affecting all versions starting from 10.5...

Linux Distros Unpatched Vulnerability : CVE-2018-8801

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab Community and Enterprise Editions version 8.3 up to 10.x before 10.3 are vulnerable to SSRF in the Services and webhooks component. CVE-2018-8801 Note th...

CVE-2025-8895

The WP Webhooks plugin for WordPress is vulnerable to arbitrary file copy due to missing validation of user-supplied input in all versions up to, and including, 3.3.5. This makes it possible for unauthenticated attackers to copy arbitrary files on the affected site's server to arbitrary locations...