EUVD-2025-30979

Malicious code in bioql PyPI...

EUVD-2025-30964

Malicious code in bioql PyPI...

EUVD-2025-14660

Malicious code in bioql PyPI...

EUVD-2025-9025

Malicious code in bioql PyPI...

EUVD-2025-1751

Malicious code in bioql PyPI...

EUVD-2025-27533

Malicious code in bioql PyPI...

EUVD-2025-19601

Malicious code in bioql PyPI...

EUVD-2023-52423

Malicious code in bioql PyPI...

EUVD-2024-48200

Malicious code in bioql PyPI...

EUVD-2023-36039

Malicious code in bioql PyPI...

EUVD-2024-32219

Malicious code in bioql PyPI...

CVE-2025-10609 Hardcoded Credentials in Logo Software's TigerWings ERP

Use of Hard-coded Credentials vulnerability in Logo Software Inc. TigerWings ERP allows Read Sensitive Constants Within an Executable. This issue affects TigerWings ERP: from 01.01.00 before 3.03.00...

CVE-2025-10609: Use of Hard-coded Credentials

Use of Hard-coded Credentials vulnerability in Logo Software Inc. TigerWings ERP allows Read Sensitive Constants Within an Executable. This issue affects TigerWings ERP: from 01.01.00 before 3.03.00...

OESA-2025-2322 python-pyinstaller security update

PyInstaller bundles a Python application and all its dependencies into a single package. The user can run the packaged app without installing a Python interpreter or any modules. Security Fixes: Due to a special entry being appended to sys.path during the bootstrap process of a PyInstaller-frozen...

CVE-2025-59524

Horilla is a free and open source Human Resource Management System HRMS. Prior to version 1.4.0, the file upload flow performs validation only in the browser and does not enforce server-side checks. An attacker can bypass the client-side validation for example, with an intercepting proxy or by...

CVE-2025-9844

Uncontrolled Search Path Element vulnerability in Salesforce Salesforce CLI on Windows allows Replace Trusted Executable.This issue affects Salesforce CLI: before 2.106.6...

CVE-2025-59524

Horilla (HRMS) prior to v1.4.0 is affected; file upload validation is only client-side, allowing bypass via crafted requests to store an executable HTML document on the server. When a privileged user views the uploaded file, embedded script can exfiltrate session cookies/credentials to attacker-c...

DEBIAN-CVE-2025-23339

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in cuobjdump where an attacker may cause a stack-based buffer overflow by getting the user to run cuobjdump on a malicious ELF file. A successful exploit of this vulnerability may lead to arbitrary code execution at the privilege leve...

CVE-2025-23339

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in cuobjdump where an attacker may cause a stack-based buffer overflow by getting the user to run cuobjdump on a malicious ELF file. A successful exploit of this vulnerability may lead to arbitrary code execution at the privilege leve...

CVE-2025-23271

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successful exploit of this vulnerability may lead to a partial denial of service...