EUVD-2021-9846

Malicious code in bioql PyPI...

EUVD-2023-33818

Malicious code in bioql PyPI...

EUVD-2023-36491

Malicious code in bioql PyPI...

EUVD-2024-46409

Malicious code in bioql PyPI...

EUVD-2021-34148

Malicious code in bioql PyPI...

EUVD-2021-34146

Malicious code in bioql PyPI...

EUVD-2024-1644

Malicious code in bioql PyPI...

EUVD-2021-34149

Malicious code in bioql PyPI...

EUVD-2022-52173

Malicious code in bioql PyPI...

EUVD-2024-52766

Malicious code in bioql PyPI...

EUVD-2024-54273

Malicious code in bioql PyPI...

VulnCheck KEV: CVE-2023-2163

Incorrect verifier pruning in BPF in Linux Kernel =5.4 leads to unsafe code paths being incorrectly marked as safe, resulting in arbitrary read/write in kernel memory, lateral privilege escalation, and container escape...

CVE-2025-29421

PerfreeBlog v4.0.11 has an arbitrary file read vulnerability in the getThemeFileContent function...

CVE-2025-9257

CVE-2025-9257 involves WebITR by Uniong, which is vulnerable to an Arbitrary File Reading via Absolute Path Traversal . The issue affects the WebITR component and allows a remote attacker with regular privileges to perform a path traversal over the network to download arbitrary system files. The ...

GHSA-3XW7-V6CJ-5Q8H Copier's safe template has arbitrary filesystem read/write access

Impact Copier's current security model shall restrict filesystem access through Jinja: - Files can only be read using % include ... %, which is limited by Jinja to reading files from the subtree of the local template clone in our case. - Files are written in the destination directory according to...

CVE-2025-8959 HashiCorp go-getter Vulnerable to Arbitrary Read through Symlink Attack

HashiCorp's go-getter library subdirectory download feature is vulnerable to symlink attacks leading to unauthorized read access beyond the designated directory boundaries. This vulnerability, identified as CVE-2025-8959, is fixed in go-getter 1.7.9...

CVE-2025-8959 HashiCorp go-getter Vulnerable to Arbitrary Read through Symlink Attack

HashiCorp's go-getter library subdirectory download feature is vulnerable to symlink attacks leading to unauthorized read access beyond the designated directory boundaries. This vulnerability, identified as CVE-2025-8959, is fixed in go-getter 1.7.9...

CVE-2025-8081

The Elementor plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.30.2 via the ImportImages::import function due to insufficient controls on the filename specified. This makes it possible for authenticated attackers, with administrator-level access an...

Linux Distros Unpatched Vulnerability : CVE-2019-9791

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The type inference system allows the compilation of functions that can cause type confusions between arbitrary objects when compiled through the IonMonkey...

GIGABYTE Chipsets 安全漏洞

GIGABYTE Chipsets is a series of open source chipsets from GIGABYTE of Taiwan, China. A security vulnerability exists in GIGABYTE Chipsets that originates from an unverified pointer and could lead to arbitrary read/write access and elevation of privilege...