281 matches found
EUVD-2024-38932
Malicious code in bioql PyPI...
EUVD-2022-4520
Malicious code in bioql PyPI...
EUVD-2024-41290
Malicious code in bioql PyPI...
EUVD-2025-28081
Malicious code in bioql PyPI...
EUVD-2025-28921
Malicious code in bioql PyPI...
EUVD-2022-29648
Malicious code in bioql PyPI...
EUVD-2023-47227
Malicious code in bioql PyPI...
EUVD-2025-22874
Malicious code in bioql PyPI...
EUVD-2025-5972
Malicious code in bioql PyPI...
EUVD-2025-22944
Malicious code in bioql PyPI...
EUVD-2025-11894
Malicious code in bioql PyPI...
EUVD-2022-7351
Malicious code in bioql PyPI...
EUVD-2022-42986
Malicious code in bioql PyPI...
EUVD-2025-28073
Malicious code in bioql PyPI...
EUVD-2022-5048
Malicious code in bioql PyPI...
CVE-2025-59421 Press vulnerable to email flooding to users due to lack of validation and rate limits
Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace, and software-as-a-service SaaS. A bad actor can flood the inbox of a user by repeatedly sending invites duplicate. The issue is fixed in commit 83c3fc7676c5dbbe1fd5092d21d95a10c7b48615...
CVE-2025-59421
CVE-2025-59421 affects Press, a Frappe custom app running on Frappe Cloud. The issue is a lack of validation and rate limiting that allows a malicious actor to flood a user’s inbox by repeatedly sending duplicate invitations. The vulnerability is mitigated by the fix committed as 83c3fc7676c5dbbe...
CVE-2025-35436 CISA Thorium account verification email error handling
CISA Thorium uses '.unwrap' to handle errors related to account verification email messages. An unauthenticated remote attacker could cause a crash by providing a specially crafted email address or response. Fixed in commit 6a65a27...
CVE-2025-58750
rAthena is an open-source cross-platform massively multiplayer online role playing game MMORPG server. Versions prior to commit 0cc348b are missing a bound check in chclifparsemoveCharSlot that can result in reading and writing out of bounds using input from the user. The problem has been fixed i...
CVE-2025-58750 rAthena missing bound check in chclif_parse_moveCharSlot
rAthena is an open-source cross-platform massively multiplayer online role playing game MMORPG server. Versions prior to commit 0cc348b are missing a bound check in chclifparsemoveCharSlot that can result in reading and writing out of bounds using input from the user. The problem has been fixed i...