EUVD-2024-47283

Malicious code in bioql PyPI...

EUVD-2025-6689

Malicious code in bioql PyPI...

EUVD-2025-6008

Malicious code in bioql PyPI...

EUVD-2025-6308

Malicious code in bioql PyPI...

EUVD-2025-14295

Malicious code in bioql PyPI...

EUVD-2023-41884

Malicious code in bioql PyPI...

EUVD-2022-4663

Malicious code in bioql PyPI...

EUVD-2025-11420

Malicious code in bioql PyPI...

EUVD-2025-5376

Malicious code in bioql PyPI...

EUVD-2024-0355

Malicious code in bioql PyPI...

EUVD-2023-1547

Malicious code in bioql PyPI...

Medium: iperf3

Issue Overview: In iperf before 3.19.1, iperfauth.c has an off-by-one error and resultant heap-based buffer overflow. CVE-2025-54349 In iperf before 3.19.1, iperfauth.c has a Base64Decode assertion failure and application exit upon a malformed authentication attempt. CVE-2025-54350 Affected...

Security update for cups

This update for cups fixes the following issues: CVE-2024-47175: no validation of IPP attributes in ppdCreatePPDFromIPP2 when writing to a temporary PPD file allows for the injection of attacker-controlled data to the resulting PPD bsc1230932. CVE-2025-58060: no password check when AuthType is se...

WordPress plugin RingCentral Communications 授权问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An authorization issue...

Linux Distros Unpatched Vulnerability : CVE-2024-36611

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Symfony v7.07, a security vulnerability was identified in the FormLoginAuthenticator component, where it failed to adequately handle cases where the username...

Linux Distros Unpatched Vulnerability : CVE-2023-0210

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A bug affects the Linux kernel's ksmbd NTLMv2 authentication and is known to crash the OS immediately in Linux-based systems. CVE-2023-0210 Note that Nessus...

CVE-2025-54864 Hydra missing authentication when triggering evaluations through GitHub and Gitea plugins

Hydra is a continuous integration service for Nix based projects. Prior to commit f7bda02, /api/push-github and /api/push-gitea are called by the corresponding forge without HTTP Basic authentication. Both forges do however feature HMAC signing with a secret key. Triggering an evaluation can be...

CVE-2025-5095 Burk Technology ARC Solo Missing Authentication for Critical Function

Burk Technology ARC Solo's password change mechanism can be utilized without proper authentication procedures, allowing an attacker to take over the device. A password change request can be sent directly to the device's HTTP endpoint without providing valid credentials. The system does not enforc...

CVE-2025-51054

Vedo Suite 2024.17 is vulnerable to Incorrect Access Control, which allows remote attackers to obtain a valid high privilege JWT token without prior authentication via sending an empty HTTP POST request to the /autologin/ API endpoint...

CVE-2025-20215

Cisco Webex Meetings is affected by a certificate validation issue in the meeting-join flow. The vulnerability could let an unauthenticated, network-proximate attacker impersonate another user during the join process by monitoring local or adjacent networks and interrupting the join sequence unti...