EUVD-2022-7351

Malicious code in bioql PyPI...

EUVD-2025-28081

Malicious code in bioql PyPI...

EUVD-2024-41290

Malicious code in bioql PyPI...

EUVD-2025-28921

Malicious code in bioql PyPI...

EUVD-2022-42986

Malicious code in bioql PyPI...

EUVD-2025-22874

Malicious code in bioql PyPI...

EUVD-2023-47227

Malicious code in bioql PyPI...

EUVD-2022-4520

Malicious code in bioql PyPI...

EUVD-2022-29648

Malicious code in bioql PyPI...

EUVD-2025-11894

Malicious code in bioql PyPI...

EUVD-2025-28073

Malicious code in bioql PyPI...

EUVD-2025-22944

Malicious code in bioql PyPI...

EUVD-2025-5972

Malicious code in bioql PyPI...

EUVD-2024-38932

Malicious code in bioql PyPI...

EUVD-2022-5048

Malicious code in bioql PyPI...

CVE-2025-59421

CVE-2025-59421 affects Press, a Frappe custom app running on Frappe Cloud. The issue is a lack of validation and rate limiting that allows a malicious actor to flood a user’s inbox by repeatedly sending duplicate invitations. The vulnerability is mitigated by the fix committed as 83c3fc7676c5dbbe...

CVE-2025-59421 Press vulnerable to email flooding to users due to lack of validation and rate limits

Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace, and software-as-a-service SaaS. A bad actor can flood the inbox of a user by repeatedly sending invites duplicate. The issue is fixed in commit 83c3fc7676c5dbbe1fd5092d21d95a10c7b48615...

CVE-2025-35436 CISA Thorium account verification email error handling

CISA Thorium uses '.unwrap' to handle errors related to account verification email messages. An unauthenticated remote attacker could cause a crash by providing a specially crafted email address or response. Fixed in commit 6a65a27...

CVE-2025-58750

rAthena is an open-source cross-platform massively multiplayer online role playing game MMORPG server. Versions prior to commit 0cc348b are missing a bound check in chclifparsemoveCharSlot that can result in reading and writing out of bounds using input from the user. The problem has been fixed i...

CVE-2025-58750 rAthena missing bound check in chclif_parse_moveCharSlot

rAthena is an open-source cross-platform massively multiplayer online role playing game MMORPG server. Versions prior to commit 0cc348b are missing a bound check in chclifparsemoveCharSlot that can result in reading and writing out of bounds using input from the user. The problem has been fixed i...