EUVD-2025-6838

Malicious code in bioql PyPI...

EUVD-2022-41585

Malicious code in bioql PyPI...

EUVD-2024-52305

Malicious code in bioql PyPI...

EUVD-2024-33130

Malicious code in bioql PyPI...

EUVD-2022-15245

Malicious code in bioql PyPI...

EUVD-2023-45848

Malicious code in bioql PyPI...

EUVD-2025-29016

Malicious code in bioql PyPI...

EUVD-2022-38111

Malicious code in bioql PyPI...

EUVD-2023-41859

Malicious code in bioql PyPI...

EUVD-2023-47102

Malicious code in bioql PyPI...

Tenda G3 Wireless Access Point DoS

The vulnerability of the formAddVpnUsers function in the Tenda G3 wireless access point’s software is related to buffer overflows during the processing of the vpnUsers parameter. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending specially crafte...

Tenda AC8V4 DoS

The vulnerability of the formSetServerConfig function in the Tenda AC8V4 router’s microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

CVE-2025-54089

CVE-2025-54089 is a cross-site scripting vulnerability in versions of secure access prior to 14.10. Attackers with administrative access to the console can interfere with another administrator’s access to the console. The attack complexity is low; there are no attack requirements. Privileges...

CVE-2025-54089

CVE-2025-54089 affects Ivanti Secure Access Client prior to version 14.10. The issue is described as a cross-site scripting vulnerability that allows attackers with console administrative access to interfere with another administrator’s access. The attack has low complexity, requires high privile...

BIT-GITLAB-2025-8014 Allocation of Resources Without Limits or Throttling in GitLab

Denial of Service issue in GraphQL endpoints in Gitlab EE/CE affecting all versions from 11.10 prior to 18.2.7, 18.3 prior to 18.3.3, and 18.4 prior to 18.4.1 allows unauthenticated users to potentially bypass query complexity limits leading to resource exhaustion and service disruption...

GitLab Logical Operation DoS

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the improper handling of logical operations. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

Improper Check or Handling of Exceptional Conditions

Overview Affected versions of this package are vulnerable to Improper Check or Handling of Exceptional Conditions in the /api/webhook endpoint. An attacker can cause the server to crash and disrupt service availability by sending a Bitbucket Server Push event with JSON field repository.links.clon...

CVE-2025-23292

Summary : CVE-2025-23292 affects NVIDIA Delegated Licensing Service (DLS) for all appliance platforms. The vulnerability is a SQL injection in the DLS component that could allow an attacker to perform an unauthorized action, with potential partial denial of service affecting the UI. The CVSSv3.1 ...

zswap DoS

The vulnerability of the zswap component in the Linux operating system’s kernel is related to errors during thread locking. Exploiting this vulnerability can allow an attacker to cause a service failure...

WebKitGTK WebKit Data Type Conversion DoS

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit is related to data type conversion errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...