EUVD-2024-49625

Malicious code in bioql PyPI...

EUVD-2023-59037

Malicious code in bioql PyPI...

EUVD-2022-34624

Malicious code in bioql PyPI...

EUVD-2024-33723

Malicious code in bioql PyPI...

EUVD-2024-33725

Malicious code in bioql PyPI...

EUVD-2024-33726

Malicious code in bioql PyPI...

EUVD-2023-59124

Malicious code in bioql PyPI...

EUVD-2022-32893

Malicious code in bioql PyPI...

EUVD-2025-9706

Malicious code in bioql PyPI...

EUVD-2024-50161

Malicious code in bioql PyPI...

EUVD-2024-49738

Malicious code in bioql PyPI...

EUVD-2023-30752

Malicious code in bioql PyPI...

EUVD-2024-49948

Malicious code in bioql PyPI...

EUVD-2025-6251

Malicious code in bioql PyPI...

CVE-2025-9212

The WP Dispatcher plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the wpdispatcherprocessupload function in all versions up to, and including, 1.2.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...

PT-2025-40497

Name of the Vulnerable Software and Affected Versions AP Background plugin for WordPress versions 3.8.1 through 3.8.2 Description The AP Background plugin for WordPress is susceptible to arbitrary file uploads because of missing authorization and inadequate file validation within the...

CVE-2025-11221

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal', Unrestricted Upload of File with Dangerous Type vulnerability in GTONE ChangeFlow allows Path Traversal, Accessing Functionality Not Properly Constrained by ACLs.This issue affects ChangeFlow: from All versions through...

PT-2025-40417

Name of the Vulnerable Software and Affected Versions LangBot versions 4.1.0 through 4.3.4 Description LangBot is a global IM bot platform designed for LLMs. Authorized attackers can exploit the /api/v1/files/documents interface to perform arbitrary file uploads. The interface does not strictly...

MarkAny SafePC Enterprise 安全漏洞

MarkAny SafePC Enterprise is an endpoint data leakage prevention software from the Korean company MarkAny. A security vulnerability exists in MarkAny SafePC Enterprise versions prior to V7.0.1 and V5.. versions contain a security vulnerability that stems from a path traversal vulnerability that...

CVE-2025-10000

The Qyrr – simply and modern QR-Code creation plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the blobtofile function in all versions up to, and including, 2.0.7. This makes it possible for authenticated attackers, with Contributor-level access...