EUVD-2023-48095

Malicious code in bioql PyPI...

EUVD-2022-32678

Malicious code in bioql PyPI...

EUVD-2022-3282

Malicious code in bioql PyPI...

EUVD-2022-32128

Malicious code in bioql PyPI...

EUVD-2024-42693

Malicious code in bioql PyPI...

EUVD-2023-48111

Malicious code in bioql PyPI...

EUVD-2025-17884

Malicious code in bioql PyPI...

EUVD-2022-33306

Malicious code in bioql PyPI...

EUVD-2025-3114

Malicious code in bioql PyPI...

EUVD-2025-27718

Malicious code in bioql PyPI...

EUVD-2023-57450

Malicious code in bioql PyPI...

EUVD-2022-27886

Malicious code in bioql PyPI...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc USA. A security vulnerability exists in Google Chrome that stems from vulnerability to heap buffer overflow attacks...

Google Chrome 安全漏洞

Google Chrome on Android is a mobile browser from Google, optimized for Android devices, offering fast browsing, smart search, privacy protection and cross-device syncing. Google Chrome on Android suffers from an Omnibox mal-implementation vulnerability that can be exploited by attackers to cause...

Microsoft Edge 安全漏洞

Microsoft Edge is a web browser developed by Microsoft based on the Chromium kernel. A remote code execution vulnerability exists in Microsoft Edge. The vulnerability arises because the browser fails to properly handle objects in memory and can be exploited by an attacker to remotely execute code...

CVE-2025-8153

CVE-2025-8153 affects NEC Corporation UNIVERGE IX and UNIVERGE IX-R/IX-V series. The vulnerability is a Cross-site Scripting (CWE-79) issue that allows an attacker to inject arbitrary scripts, which may be executed in the user’s browser. Impact includes potential script execution in the browser a...

KLA88012 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Use-after-free vulnerability in Graphics: Canvas2D...

Color-String 安全漏洞

Color-String is a library for parsing and generating CSS color strings by the individual developer Josh Junon. A security vulnerability exists in Color-String version 2.1.1, which stems from malware payload injection and could lead to the redirection of cryptocurrency transactions in a browser...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package version contains malicious code that monitors network traffic when run in a browser and targets crypto transactions. The injected malicious code activates a hook whenever a Web3 wallet is present...

Set-Cookie response headers were being incorrectly honored in multipart HTTP responses. If an attacker could control the Content-Type response header, as well as control part of the response body, they could inject Set-Cookie response headers that would have been honored by the browser. This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8.

...