EUVD-2025-23177

Malicious code in bioql PyPI...

EUVD-2024-40243

Malicious code in bioql PyPI...

EUVD-2025-22975

Malicious code in bioql PyPI...

EUVD-2025-24264

Malicious code in bioql PyPI...

EUVD-2022-31695

Malicious code in bioql PyPI...

EUVD-2024-47823

Malicious code in bioql PyPI...

EUVD-2022-2172

Malicious code in bioql PyPI...

EUVD-2022-2771

Malicious code in bioql PyPI...

EUVD-2025-21560

Malicious code in bioql PyPI...

EUVD-2025-24823

Malicious code in bioql PyPI...

EUVD-2025-21561

Malicious code in bioql PyPI...

EUVD-2025-24777

Malicious code in bioql PyPI...

EUVD-2024-2087

Malicious code in bioql PyPI...

EUVD-2024-31628

Malicious code in bioql PyPI...

CVE-2025-7825 Schema Plugin For Divi, Gutenberg & Shortcodes <= 4.3.2 - Authenticated (Contributor+) Object Instantiation

The Schema Plugin For Divi, Gutenberg & Shortcodes plugin for WordPress is vulnerable to Object Instantiation in all versions up to, and including, 4.3.2 via deserialization of untrusted input via the wptschemabreadcrumbs shortcode. This makes it possible for authenticated attackers, with...

WordPress plugin The Schema Plugin For Divi, Gutenberg & Shortcodes 安全漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin T...

CVE-2025-61622 Apache Fory, Apache Fory: Python RCE via unguarded pickle fallback serializer in pyfory

Deserialization of untrusted data in python in pyfory versions 0.12.0 through 0.12.2, or the legacy pyfury versions from 0.1.0 through 0.10.3: allows arbitrary code execution. An application is vulnerable if it reads pyfory serialized data from untrusted sources. An attacker can craft a data stre...

Fuji Electric FRENIC-Loader 4 EXRTM File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric FRENIC-Loader 4. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2025-11135 pmTicket Project-Management-Software Cookie class.database.php loadLanguage deserialization

A vulnerability was detected in pmTicket Project-Management-Software up to 2ef379da2075f4761a2c9029cf91d073474e7486. The affected element is the function loadLanguage of the file classes/class.database.php of the component Cookie Handler. Performing manipulation of the argument userid results in...

Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability

Fortra GoAnywhere MFT contains a deserialization of untrusted data vulnerability allows an actor with a validly forged license response signature to deserialize an arbitrary actor-controlled object, possibly leading to command injection...