EUVD-2022-2100

Malicious code in bioql PyPI...

EUVD-2025-21386

Malicious code in bioql PyPI...

EUVD-2025-16021

Malicious code in bioql PyPI...

EUVD-2023-43939

Malicious code in bioql PyPI...

EUVD-2025-21708

Malicious code in bioql PyPI...

EUVD-2024-42576

Malicious code in bioql PyPI...

EUVD-2023-31043

Malicious code in bioql PyPI...

EUVD-2023-33012

Malicious code in bioql PyPI...

EUVD-2023-2439

Malicious code in bioql PyPI...

EUVD-2021-29812

Malicious code in bioql PyPI...

EUVD-2024-0411

Malicious code in bioql PyPI...

EUVD-2024-49342

Malicious code in bioql PyPI...

EUVD-2024-0829

Malicious code in bioql PyPI...

EUVD-2024-17413

Malicious code in bioql PyPI...

EUVD-2025-21129

Malicious code in bioql PyPI...

API Attack Awareness: Broken Object Level Authorization (BOLA) – Why It Tops the OWASP API Top 10

For this Cybersecurity Awareness Month, we thought it important to draw attention to some of the most common and dangerous API vulnerabilities. This week, we’re starting with Broken Object Level Authorization BOLA. BOLA vulnerabilities top the OWASP API Top Ten. And for good reason: they’re...

CVE-2025-59833

Flag Forge is a Capture The Flag CTF platform. In versions from 2.1.0 to before 2.3.0, the API endpoint GET /api/problems/:id returns challenge hints in plaintext within the question object, regardless of whether the user has unlocked them via point deduction. Users can view all hints for free,...

CVE-2025-10080

The CVE affects the API component of running-elephant Datart up to version 1.0.0-rc3, specifically the getTokensecret function in datart/security/src/main/java/datart/security/util/AESUtil.java, which uses a hard-coded cryptographic key. The issue is remotely exploitable with high complexity; exp...

Insufficient validation in the Drag and Drop API in conjunction with social engineering, may have allowed an attacker to trick end-users into creating a shortcut to local system files. This could have been leveraged to execute arbitrary code. This vulnerability affects Firefox < 115.

...

Linux Distros Unpatched Vulnerability : CVE-2021-3148

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in SaltStack Salt before 3002.5. Sending crafted web requests to the Salt API can result in salt.utils.thin.genthin command injection...