EUVD-2021-29803

Malicious code in bioql PyPI...

EUVD-2024-17142

Malicious code in bioql PyPI...

EUVD-2021-30702

Malicious code in bioql PyPI...

EUVD-2023-41772

Malicious code in bioql PyPI...

EUVD-2021-28464

Malicious code in bioql PyPI...

EUVD-2025-30811

Malicious code in bioql PyPI...

EUVD-2021-29804

Malicious code in bioql PyPI...

EUVD-2021-28255

Malicious code in bioql PyPI...

EUVD-2024-26790

Malicious code in bioql PyPI...

EUVD-2024-36474

Malicious code in bioql PyPI...

EUVD-2022-52721

Malicious code in bioql PyPI...

EUVD-2021-29807

Malicious code in bioql PyPI...

Papermark 安全漏洞

Papermark is a document analysis software by Marc Seitz, an individual developer. A security vulnerability exists in Papermark 0.20.0 and prior versions, which stems from improperly restricting access via the POST /api/file/s3/get-presigned-get-url-proxy API, which could allow an authenticated...

CVE-2025-9629

The USS Upyun plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.0. This is due to missing or incorrect nonce validation on the usssettingpage function when processing the ussset form type. This makes it possible for unauthenticated attacker...

CVE-2025-9629 USS Upyun <= 1.5.0 - Cross-Site Request Forgery

The USS Upyun plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.0. This is due to missing or incorrect nonce validation on the usssettingpage function when processing the ussset form type. This makes it possible for unauthenticated attacker...

Detecting Data Leaks Before Disaster

In January 2025, cybersecurity experts at Wiz Research found that Chinese AI specialist DeepSeek had suffered a data leak, putting more than 1 million sensitive log streams at risk. According to the Wiz Research team, they identified a publicly accessible ClickHouse database belonging to DeepSeek...

Axis Communications Autodesk Plugin AzureBlobRestAPI axiscontentfiles Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Axis Communications Autodesk Plugin. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of a cloud resource. The issue results from allowi...

Malicious code in cloud_storage_utils (npm)

The package cloudstorageutils was found to contain malicious code...

MAL-2025-17177 Malicious code in cloud_storage_utils (npm)

The package cloudstorageutils was found to contain malicious code...

Malicious code in compress-img-and-upload-to-s3-securely-pretty-please-with-sugar-on-top (npm)

The package compress-img-and-upload-to-s3-securely-pretty-please-with-sugar-on-top was found to contain malicious code...