EUVD-2023-51506

Malicious code in bioql PyPI...

EUVD-2023-3075

Malicious code in bioql PyPI...

EUVD-2025-9653

Malicious code in bioql PyPI...

EUVD-2024-20381

Malicious code in bioql PyPI...

EUVD-2025-4452

Malicious code in bioql PyPI...

CVE-2025-56551

An issue in DirectAdmin v1.680 allows unauthorized attackers to manipulate the page layout and replace the legitimate login interface with arbitrary attacker-controlled content via supplying a crafted GET request...

CVE-2025-56551

An issue in DirectAdmin v1.680 (specifically the DirectAdmin Evolution Skin ) allows unauthorized attackers to manipulate the page layout. By supplying a crafted GET request , an attacker can replace the legitimate login interface with arbitrary attacker-controlled content. The vulnerability is a...

CVE-2025-54087 Server-side request forgery in Secure Access

CVE-2025-54087 is a server-side request forgery vulnerability in Secure Access prior to version 14.10. Attackers with administrative privileges can publish a crafted test HTTP request originating from the Secure Access server. The attack complexity is high, there are no attack requirements, and...

Ivanti Secure Access Client security vulnerabilities

Ivanti Secure Access Client is a security software client from Ivanti Corporation, USA. A security vulnerability exists in Ivanti Secure Access Client versions prior to 14.10, which originates from an attacker with administrative privileges who can issue a specially crafted test HTTP request,...

PT-2025-40421

Name of the Vulnerable Software and Affected Versions Secure Access versions prior to 14.10 Description A server-side request forgery condition exists in Secure Access. Individuals with administrative rights can submit a specially designed HTTP request from the Secure Access server. The attack...

CVE-2025-28357

A CRLF injection vulnerability in Neto CMS v6.313.0 through v6.314.0 allows attackers to execute arbitrary code via supplying a crafted HTTP request...

Western Digital My Cloud NAS System Code Execution

The vulnerability of Western Digital My Cloud NAS’ network storage software’s microprogramming system is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted POST...

DirectAdmin Evolution Skin security vulnerability

DirectAdmin Evolution Skin is an application from DirectAdmin, Inc. A security vulnerability exists in DirectAdmin Evolution Skin version 1.680 that stems from a specially crafted GET request that can manipulate the page layout, potentially causing the login screen to be replaced with...

CVE-2025-36099

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to a denial of service, caused by sending a specially-crafted request. A privileged user could exploit this vulnerability to cause the server to consume memory resources...

IBM WebSphere Application Server 8.5.x < 8.5.5.29 / 9.x < 9.0.5.26 DoS (7246549)

The version of IBM WebSphere Application Server running on the remote host is affected by a DoS vulnerability as referenced in the 7246549 advisory. - IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to a denial of service, caused by sending a specially-crafted request. A privileged use...

CVE-2025-56392

Syaqui Collegetivity v1.0.0 is vulnerable to an Insecure Direct Object Reference (IDOR) in the /dashboard/notes API endpoint. An attacker can exploit this by sending a crafted POST request to impersonate other users and perform unauthorized actions or gain access to other users' data. Remediation...

CVE-2025-36099

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to a denial of service, caused by sending a specially-crafted request. A privileged user could exploit this vulnerability to cause the server to consume memory resources...

CVE-2025-36099

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to a denial of service, caused by sending a specially-crafted request. A privileged user could exploit this vulnerability to cause the server to consume memory resources...

CVE-2025-36099

CVE-2025-36099 affects IBM WebSphere Application Server 8.5 and 9.0 embedded in various IBM products (e.g., JazzSM, Engineering Test Management, Cloud Pak for Applications, DevOps ClearCase-related stacks, Tivoli System Automation). Description: a denial-of-service vulnerability where a specially...

CVE-2025-36099 IBM WebSphere Application Server denial of service

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to a denial of service, caused by sending a specially-crafted request. A privileged user could exploit this vulnerability to cause the server to consume memory resources...