EUVD-2025-6299

Malicious code in bioql PyPI...

EUVD-2022-42623

Malicious code in bioql PyPI...

EUVD-2025-31580

Malicious code in bioql PyPI...

EUVD-2024-47994

Malicious code in bioql PyPI...

EUVD-2023-2014

Malicious code in bioql PyPI...

EUVD-2024-3238

Malicious code in bioql PyPI...

EUVD-2022-52450

Malicious code in bioql PyPI...

EUVD-2025-18689

Malicious code in bioql PyPI...

EUVD-2023-44323

Malicious code in bioql PyPI...

EUVD-2024-0602

Malicious code in bioql PyPI...

EUVD-2022-32622

Malicious code in bioql PyPI...

EUVD-2023-27050

Malicious code in bioql PyPI...

EUVD-2024-53439

Malicious code in bioql PyPI...

EUVD-2025-20502

Malicious code in bioql PyPI...

CLSA-2025-1758896091 gdk-pixbuf2: Fix of CVE-2025-7345

CVE-2025-7345: fix heap buffer overflow during base64 encoding in gdkpixbufjpegimageloadincrement...

p0wnedShell

This is an offensive PowerShell host application written in C that runs PowerShell commands and functions within a PowerShell runspace environment. It includes various offensive PowerShell modules and binaries to facilitate post-exploitation activities, such as bypassing mitigations and creating...

CLSA-2025-1757698525 gdk-pixbuf2: Fix of CVE-2025-7345

CVE-2025-7345: fix heap buffer overflow during base64 encoding in gdkpixbufjpegimageloadincrement...

CLSA-2025-1757662747 gdk-pixbuf2: Fix of CVE-2025-7345

CVE-2025-7345: fix heap buffer overflow during base64 encoding in gdkpixbufjpegimageloadincrement...

CVE-2025-41035

appRain CMF 4.0.5 contains an authenticated path traversal vulnerability in the /apprain/common/download/ endpoint. The issue arises from handling of base64-encoded path parameters after /download/, allowing an attacker with sufficient permissions to access files outside the document root. Connec...

GHSA-MXH2-CCGJ-8635 ESP-IDF web_server basic auth bypass using empty or incomplete Authorization header

Summary On the ESP-IDF platform, ESPHome's webserver authentication check can pass incorrectly when the client-supplied base64-encoded Authorization value is empty or is a substring of the correct value e.g., correct username with partial password. This allows access to webserver functionality...