EUVD-2024-19287

Malicious code in bioql PyPI...

EUVD-2024-49433

Malicious code in bioql PyPI...

EUVD-2024-32056

Malicious code in bioql PyPI...

EUVD-2024-47313

Malicious code in bioql PyPI...

EUVD-2025-25425

Malicious code in bioql PyPI...

EUVD-2023-26543

Malicious code in bioql PyPI...

EUVD-2023-26544

Malicious code in bioql PyPI...

EUVD-2024-47961

Malicious code in bioql PyPI...

EUVD-2025-11795

Malicious code in bioql PyPI...

EUVD-2022-28668

Malicious code in bioql PyPI...

EUVD-2022-49076

Malicious code in bioql PyPI...

EUVD-2024-32860

Malicious code in bioql PyPI...

EUVD-2021-28613

Malicious code in bioql PyPI...

EUVD-2024-54216

Malicious code in bioql PyPI...

Exploit-Notes

Exploit Notes Exploit Notes is sticky notes for pentesting...

Wordfence Intelligence Weekly WordPress Vulnerability Report (September 22, 2025 to September 28, 2025)

Calling all Vulnerability Researchers and Bug Bounty Hunters! Operation: Maximum Impact Challenge ! Now through November 10, 2025, earn 2X bounty rewards forall in-scope submissions in software with at least 5,000 active installs and fewer than 5 million active installs. Bounties up to $31,200 pe...

go-f3 Vulnerable to Cached Justification Verification Bypass

Description A vulnerability exists in go-f3's justification verification caching mechanism where verification results are cached without properly considering the context of the message. An attacker can bypass justification verification by: 1. First submitting a valid message with a correct...

Nextcloud: WebAuthn app was updated based on public key

Vulnerability description not provided...

Mars: Publicly accessible `█████████` endpoint exposing internal user identifiers and email addresses

A publicly accessible JSON API endpoint was found to expose sensitive user information, including internal identifiers and email addresses. The vulnerability was classified as an information disclosure issue with a medium severity rating. The problem was remediated by implementing proper...

curl: SMTP Command Injection Vulnerabilities in curl

Summary Successfully reproduced SMTP command injection vulnerabilities in curl that allow attackers to inject arbitrary SMTP commands by using carriage return and line feed characters \r\n in email addresses. Vulnerabilities Confirmed 1. MAIL FROM Injection Description: Injection via --mail-from...