EUVD-2022-29256

Malicious code in bioql PyPI...

EUVD-2024-28253

Malicious code in bioql PyPI...

EUVD-2024-16015

Malicious code in bioql PyPI...

EUVD-2024-28273

Malicious code in bioql PyPI...

EUVD-2024-28255

Malicious code in bioql PyPI...

EUVD-2023-46549

Malicious code in bioql PyPI...

EUVD-2022-33113

Malicious code in bioql PyPI...

EUVD-2022-33115

Malicious code in bioql PyPI...

CVE-2025-59744

Path traversal vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to access files only within the web root using the “docurl” parameter in “/lib/asp/DOCSAVEASASP.ASP”...

CVE-2025-11013

A vulnerability was identified in BehaviorTree up to 4.7.0. This vulnerability affects the function XMLParser::PImpl::loadDocImpl of the file /src/xmlparsing.cpp of the component XML Parser. The manipulation leads to null pointer dereference. The attack can only be performed from a local...

CVE-2025-42907 Server-Side Request Forgery in SAP BI Platform

SAP BI Platform allows an attacker to modify the IP address of the LogonToken for the OpenDoc. On accessing the modified link in the browser a different server could get the ping request. This has low impact on integrity with no impact on confidentiality and availability of the system...

CVE-2025-42907 Server-Side Request Forgery in SAP BI Platform

SAP BI Platform allows an attacker to modify the IP address of the LogonToken for the OpenDoc. On accessing the modified link in the browser a different server could get the ping request. This has low impact on integrity with no impact on confidentiality and availability of the system...

PT-2025-39106

Name of the Vulnerable Software and Affected Versions SAP BI Platform affected versions not specified Description An attacker can modify the IP address within the LogonToken associated with OpenDoc. Accessing the modified link in a web browser may redirect a ping request to a different server. Th...

CVE-2025-10195

CVE-2025-10195 affects Seismic App version 2.4.2 on Android, specifically the com.seismic.doccenter AndroidManifest.xml. The vulnerability arises from improper export of an Android component, enabling a local attack. Exploit appears publicly disclosed; vendor has not responded. Several sources co...

Malicious code in numba-doc-zh (npm)

The package numba-doc-zh was found to contain malicious code...

MAL-2025-45378 Malicious code in numba-doc-zh (npm)

The package numba-doc-zh was found to contain malicious code...

Malicious code in pyqt4-doc-zh (npm)

The package pyqt4-doc-zh was found to contain malicious code...

Malicious code in pytorch-doc-zh (npm)

The package pytorch-doc-zh was found to contain malicious code...

MAL-2025-45661 Malicious code in pyqt4-doc-zh (npm)

The package pyqt4-doc-zh was found to contain malicious code...

Malicious code in doc-plugin-rush-stack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a12c396a6086d8e62fcd6527bd6c4056f50c8def8a668f50a021b0c73a3291be The OpenSSF Package Analysis project identified 'doc-plugin-rush-stack' @ 99.0.9 npm as malicious. It is considered malicious because: - The...