EUVD-2025-0040

Malicious code in bioql PyPI...

EUVD-2023-24965

Malicious code in bioql PyPI...

EUVD-2021-7409

Malicious code in bioql PyPI...

EUVD-2022-25781

Malicious code in bioql PyPI...

EUVD-2022-7040

Malicious code in bioql PyPI...

EUVD-2022-25504

Malicious code in bioql PyPI...

EUVD-2022-4812

Malicious code in bioql PyPI...

EUVD-2024-46817

Malicious code in bioql PyPI...

EUVD-2024-0827

Malicious code in bioql PyPI...

EUVD-2022-0701

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-12105

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenConnect through 8.08 mishandles negative return values from X509check function calls, which might assist attackers in performing man-in-the-middle attacks...

CVE-2025-54387 IPX is Vulnerable to Path Traversal via Prefix Matching Bypass

IPX is an image optimizer powered by sharp and svgo. In versions 1.3.1 and below, 2.0.0-0 through 2.1.0, and 3.0.0 through 3.1.0, the approach used to check whether a path is within allowed directories is vulnerable to path prefix bypass when the allowed directories do not end with a path...

CVE-2025-8068

The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to unauthorized modification and loss of data due to an improper capability check on the 'ajaxtrashtemplates' function in all versions up to, and including, 2.9.1. This makes it possible for authenticated attackers, wi...

CVE-2025-8198

The MinimogWP – The High Converting eCommerce WordPress Theme theme for WordPress is vulnerable to price manipulation in all versions up to, and including, 3.9.0. This is due to an insufficient check on quantity values when changing quantities in the cart. This makes it possible for unauthenticat...

PT-2025-28536 · Microsoft · Windows Virtualization-Based Security +1

Name of the Vulnerable Software and Affected Versions: Windows Virtualization-Based Security VBS affected versions not specified Description: The issue concerns a lack of integrity check support in Windows Virtualization-Based Security VBS Enclave, allowing an authorized attacker to locally eleva...

CVE-2025-47202

In RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400, the lack of a length check leads to out-of-bounds writes...

CVE-2025-26780

A security vulnerability exists in the L2 component of the Samsung Mobile Processor and Modem Exynos 2400 and Modem 5400 . The root cause is a lack of length checking , which allows a Denial of Service (DoS) to occur when processing a malformed PDCP packet . To remediate this, it is recommended t...

CVE-2025-4571

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized view and modification of data due to an insufficient capability check on the permissionsCheck functions in all versions up to, and including, 4.3.0. This makes it possible for authenticated...

PT-2025-25351 · Aveva · Aveva Pi Connector For Cygnet

Name of the Vulnerable Software and Affected Versions: AVEVA PI Connector for CygNet versions 1.6.14 and prior Description: An improper validation of integrity check value issue exists that, if exploited, could allow a miscreant with elevated privileges to modify local data files in a way that...

PT-2025-24594 · Sap · Sap S/4Hana

Name of the Vulnerable Software and Affected Versions: SAP S/4HANA affected versions not specified Description: The issue is related to a missing authorization check in the Enterprise Event Enablement component. An attacker with access to the Inbound Binding Configuration can create an RFC...