973236 matches found
EUVD-2024-49433
Malicious code in bioql PyPI...
EUVD-2022-49077
Malicious code in bioql PyPI...
EUVD-2023-26543
Malicious code in bioql PyPI...
EUVD-2024-32056
Malicious code in bioql PyPI...
EUVD-2025-25425
Malicious code in bioql PyPI...
EUVD-2024-46964
Malicious code in bioql PyPI...
EUVD-2023-26544
Malicious code in bioql PyPI...
EUVD-2022-49076
Malicious code in bioql PyPI...
EUVD-2024-47961
Malicious code in bioql PyPI...
EUVD-2025-11795
Malicious code in bioql PyPI...
EUVD-2022-28674
Malicious code in bioql PyPI...
EUVD-2022-49075
Malicious code in bioql PyPI...
Exploit-Notes
Exploit Notes Exploit Notes is sticky notes for pentesting...
Wordfence Intelligence Weekly WordPress Vulnerability Report (September 22, 2025 to September 28, 2025)
Calling all Vulnerability Researchers and Bug Bounty Hunters! Operation: Maximum Impact Challenge ! Now through November 10, 2025, earn 2X bounty rewards forall in-scope submissions in software with at least 5,000 active installs and fewer than 5 million active installs. Bounties up to $31,200 pe...
go-f3 Vulnerable to Cached Justification Verification Bypass
Description A vulnerability exists in go-f3's justification verification caching mechanism where verification results are cached without properly considering the context of the message. An attacker can bypass justification verification by: 1. First submitting a valid message with a correct...
Nextcloud: WebAuthn app was updated based on public key
Vulnerability description not provided...
Mars: Publicly accessible `βββββββββ` endpoint exposing internal user identifiers and email addresses
A publicly accessible JSON API endpoint was found to expose sensitive user information, including internal identifiers and email addresses. The vulnerability was classified as an information disclosure issue with a medium severity rating. The problem was remediated by implementing proper...
curl: SMTP Command Injection Vulnerabilities in curl
Summary Successfully reproduced SMTP command injection vulnerabilities in curl that allow attackers to inject arbitrary SMTP commands by using carriage return and line feed characters \r\n in email addresses. Vulnerabilities Confirmed 1. MAIL FROM Injection Description: Injection via --mail-from...
Wordfence Intelligence Weekly WordPress Vulnerability Report (September 15, 2025 to September 21, 2025)
Calling all Vulnerability Researchers and Bug Bounty Hunters! Operation: Maximum Impact Challenge ! Now through November 10, 2025, earn 2X bounty rewards forall in-scope submissions in software with at least 5,000 active installs and fewer than 5 million active installs. Bounties up to $31,200 pe...
Nextcloud: Stored XSS Vulnerability via SVG File
A stored XSS vulnerability was discovered in Nextcloud related to the handling of SVG files. The vulnerability allowed the execution of arbitrary JavaScript code...