EUVD-2023-32038

Malicious code in bioql PyPI...

EUVD-2024-50977

Malicious code in bioql PyPI...

EUVD-2025-15227

Malicious code in bioql PyPI...

EUVD-2025-6752

Malicious code in bioql PyPI...

EUVD-2024-15986

Malicious code in bioql PyPI...

EUVD-2021-9305

Malicious code in bioql PyPI...

EUVD-2021-28578

Malicious code in bioql PyPI...

EUVD-2022-37347

Malicious code in bioql PyPI...

EUVD-2022-40948

Malicious code in bioql PyPI...

EUVD-2025-31389

Malicious code in bioql PyPI...

EUVD-2025-27856

Malicious code in bioql PyPI...

EUVD-2022-37406

Malicious code in bioql PyPI...

EUVD-2022-34207

Malicious code in bioql PyPI...

EUVD-2024-53911

Malicious code in bioql PyPI...

CVE-2025-54875

FreshRSS is a free, self-hostable RSS aggregator. In versions 1.16.0 and above through 1.26.3, an unprivileged attacker can create a new admin user when registration is enabled through the use of a hidden field used only in the user management admin page, newuserisadmin. This is fixed in version...

CVE-2025-59945

SysReptor is a fully customizable pentest reporting platform. In versions from 2024.74 to before 2025.83, authenticated and unprivileged non-admin users can assign the isprojectadmin permission to their own user. This allows users to read, modify and delete pentesting projects they are not member...

CVE-2025-41244

VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate...

CVE-2025-41246 Improper authorisation vulnerability

VMware Tools for Windows contains an improper authorisation vulnerability due to the way it handles user access controls. A malicious actor with non-administrative privileges on a guest VM, who is already authenticated through vCenter or ESX may exploit this issue to access other guest VMs...

UBUNTU-CVE-2025-41244

VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate...

CVE-2025-11078 itsourcecode Open Source Job Portal controller.php unrestricted upload

A vulnerability was identified in itsourcecode Open Source Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/user/controller.php?action=photos. The manipulation of the argument photo leads to unrestricted upload. The attack is possible to be carried out...