EUVD-2020-22962

Malware in sbrugna...

EUVD-2001-0909

Malware in sbrugna...

EUVD-2022-2454

Malicious code in bioql PyPI...

EUVD-2022-1681

Malicious code in bioql PyPI...

EUVD-2023-36711

Malicious code in bioql PyPI...

EUVD-2025-32195

Malicious code in bioql PyPI...

EUVD-2025-0115

Malicious code in bioql PyPI...

EUVD-2025-16359

Malicious code in bioql PyPI...

EUVD-2023-58468

Malicious code in bioql PyPI...

EUVD-2025-10094

Malicious code in bioql PyPI...

EUVD-2024-24496

Malicious code in bioql PyPI...

EUVD-2024-49489

Malicious code in bioql PyPI...

EUVD-2024-44262

Malicious code in bioql PyPI...

CVE-2025-56648

The parcel build tool (versions 2.0.0-alpha and before, as well as 1.6.1 and above) contains an Origin Validation Error vulnerability. This flaw allows malicious websites to send XMLHTTPRequests to a developer's application development server, which can result in the theft of source code when a d...

CVE-2025-58598

Insertion of Sensitive Information Into Debugging Code vulnerability in Klarna Klarna Order Management for WooCommerce klarna-order-management-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Klarna Order Management for WooCommerce: from n/a through = 1.9.8...

Linux Distros Unpatched Vulnerability : CVE-2025-48068

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Next.js is a React framework for building full-stack web applications. In versions starting from 13.0 to before 14.2.30 and 15.0.0 to before 15.2.2, Next.js may...

CVE-2025-51539

EzGED3 3.5.0 contains an unauthenticated arbitrary file read vulnerability due to improper access control and insufficient input validation in a script exposed via the web interface. A remote attacker can supply a crafted path parameter to a PHP script to read arbitrary files from the filesystem...

PT-2025-33747

Name of the Vulnerable Software and Affected Versions: EzGED3 versions prior to 3.5.72.27183 Description: EzGED3 is susceptible to an unauthenticated arbitrary file read issue stemming from inadequate access control and insufficient input validation within a web-accessible script. An attacker can...

BIT-LIBPHP-2024-4577 Argument Injection in PHP-CGI

In PHP versions 8.1. before 8.1.29, 8.2. before 8.2.20, 8.3. before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use "Best-Fit" behavior to replace characters in command line given to Win32 API functions. PHP CGI module may...

Missing Origin Validation In WebSockets

Next.js is vulnerable to Missing Origin Validation in WebSockets . The vulnerability is due to limited source code exposure in local development mode when the App Router is enabled, which allows an attacker to trick a user into visiting a malicious webpage while npm run dev is active, potentially...