EUVD-2017-10006

Malware in sbrugna...

EUVD-2024-1053

Malicious code in bioql PyPI...

EUVD-2025-3966

Malicious code in bioql PyPI...

EUVD-2022-45548

Malicious code in bioql PyPI...

EUVD-2024-24977

Malicious code in bioql PyPI...

EUVD-2025-22954

Malicious code in bioql PyPI...

EUVD-2023-28620

Malicious code in bioql PyPI...

EUVD-2025-22957

Malicious code in bioql PyPI...

EUVD-2023-2168

Malicious code in bioql PyPI...

EUVD-2022-42278

Malicious code in bioql PyPI...

EUVD-2025-7012

Malicious code in bioql PyPI...

EUVD-2022-4664

Malicious code in bioql PyPI...

EUVD-2025-20674

Malicious code in bioql PyPI...

CVE-2025-34218

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 VA/SaaS deployments expose internal Docker containers through the gw Docker instance. The gateway publishes a /meta endpoint which lists every micro‑service container...

PT-2025-35925

Name of the Vulnerable Software and Affected Versions: appRain CMF version 4.0.5 Description: A stored authenticated cross-site scripting XSS issue exists due to insufficient validation of user-supplied input. The vulnerability is present in the /apprain/developer/addons/update/cycle endpoint,...

CVE-2025-50904

There is an authentication bypass vulnerability in WinterChenS my-site thru commit 6c79286 2025-06-11. An attacker can exploit this vulnerability to access /admin/ API without any token...

PT-2025-34134 · Winterchens · My-Site

Name of the Vulnerable Software and Affected Versions: WinterChenS my-site versions through commit 6c79286 2025-06-11 Description: An authentication bypass allows unauthorized access to the /admin/ API without a token. Recommendations: Versions prior to commit 6c79286 2025-06-11 should be updated...

PT-2025-33736 · WordPress · Jonkastonka Cookies/Content Security Policy

Name of the Vulnerable Software and Affected Versions: jonkastonka Cookies and Content Security Policy plugin versions through 2.29 Description: Incorrect access control in the AJAX endpoint functionality allows remote attackers to cause a denial of service database server resource exhaustion via...

CVE-2025-51308

CVE-2025-51308 affects Gatling Enterprise, versions below 1.25.0. A low-privileged user without the admin role can issue REST API calls to read-only endpoints and collect information due to missing authorization checks. The issue is described as unauthorized access to information via read-only en...

ExaGrid EX10 安全漏洞

ExaGrid EX10 is a backup storage server from ExaGrid USA. A security vulnerability exists in ExaGrid EX10 versions 6.3 through 7.0.1.P08, which stems from improper access control of the MailConfiguration API endpoint and could lead to obtaining SMTP credentials...