EUVD-2022-48997

Malicious code in bioql PyPI...

EUVD-2022-53044

Malicious code in bioql PyPI...

EUVD-2024-54001

Malicious code in bioql PyPI...

EUVD-2022-51473

Malicious code in bioql PyPI...

EUVD-2024-42487

Malicious code in bioql PyPI...

EUVD-2022-0770

Malicious code in bioql PyPI...

EUVD-2024-18601

Malicious code in bioql PyPI...

EUVD-2021-28343

Malicious code in bioql PyPI...

EUVD-2024-42486

Malicious code in bioql PyPI...

EUVD-2025-32303

phpMyFAQ is an open source FAQ web application. Versions 4.0-nightly-2025-10-03 and below do not enforce uniqueness of email addresses during user registration. This allows multiple distinct accounts to be created with the same email. Because email is often used as an identifier for password...

CVE-2025-57204

Stocky POS with Inventory Management & HRM ui-lib version 5.0 is affected by a Stored Cross-Site Scripting XSS vulnerability within the Products module available to authenticated users. The vulnerability resides in the product name parameter submitted to the product-creation endpoint via a standa...

Vulnerability of the ubi_create_volume() function in the drivers/mtd/ubi/vmt.c module – This driver is a part of the Linux operating system’s memory support mechanism for the kernel. It allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

Vulnerability of the ubicreatevolume function in the drivers/mtd/ubi/vmt.c module – The Linux kernel’s memory support driver involves reusing previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...

CVE-2025-54174

QuickCMS is vulnerable to Cross-Site Request Forgery in article creation functionality. Malicious attacker can craft special website, which when visited by the admin, will automatically send a POST request creating a malicious article with content defined by the attacker. The vendor was notified...

SRC-2025-0001 : Samsung MagicINFO 9 Server ResponseBootstrappingActivity Exposed Dangerous Method Remote Code Execution Vulnerability

Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung MagicINFO. Authentication is required and SaaS environment needs to be configured. The specific flaw exists within ability to dynamically create FTP accounts. An attack...

PT-2025-32397 · Unknown · Mobilecartly

Name of the Vulnerable Software and Affected Versions: MobileCartly version 1.0 Description: MobileCartly version 1.0 contains an arbitrary file creation vulnerability in the savepage.php script. The application does not perform authentication or authorization checks before using the file put...

CVE-2025-6215

CVE-2025-6215 - Omnishop WordPress Plugin : The Omnishop plugin (WordPress) is vulnerable to unauthenticated registration bypass in all versions up to 1.0.9. The REST endpoint /users/register is publicly accessible because permission_callback always returns true and it calls wp_create_user() unco...

GHSA-CJ7V-27PG-WF7Q

creationtimestamp| type| source ---|---|--- 2025-07-16 07:18:05+00:00| seen| https://gist.github.com/safer-bot/3c43a302c33a551aa633dcedbb152fe3...

CVE-2025-6775

The CVE-2025-6775 entry concerns xiaoyunjie openvpn-cms-flask (versions

Security Bulletin: IBM Cloud Pak for Data is vulnerable to multiple Vulnerabilities due to Ruby package

Summary Potential vulnerabilities in Ruby package has been identified that may affect IBM Cloud Pak for Data. Refer to details for additional information. Vulnerability Details CVEID:CVE-2020-10663 DESCRIPTION: The JSON gem through 2.2.0 for Ruby, as used in Ruby 2.4 through 2.4.9, 2.5 through...

PT-2025-23583 · Qualcomm · Snapdragon

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue involves memory corruption during dynamic process creation when a client passes only the address and length of a shell binary. Recommendations: At the moment, there is no informati...