EUVD-2025-8348

Malicious code in bioql PyPI...

EUVD-2025-19339

Malicious code in bioql PyPI...

EUVD-2024-50563

Malicious code in bioql PyPI...

EUVD-2025-18648

Malicious code in bioql PyPI...

EUVD-2021-30019

Malicious code in bioql PyPI...

EUVD-2025-8217

Malicious code in bioql PyPI...

EUVD-2025-5605

Malicious code in bioql PyPI...

EUVD-2022-49457

Malicious code in bioql PyPI...

EUVD-2025-13742

Malicious code in bioql PyPI...

EUVD-2023-34032

Malicious code in bioql PyPI...

CVE-2025-55316

External control of file name or path in Azure Arc allows an authorized attacker to elevate privileges locally...

CVE-2025-55316

External control of file name or path in Azure Arc allows an authorized attacker to elevate privileges locally...

External Control of File Name or Path

Overview org.keycloak:keycloak-services is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to External Control of File Name or Path due to the vault secret lookup not accounting for the Windows file...

Linux Distros Unpatched Vulnerability : CVE-2025-26646

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network...

CVE-2025-49760

External control of file name or path in Windows Storage allows an authorized attacker to perform spoofing over a network...

CVE-2025-49253

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Lasa lasa allows PHP Local File Inclusion.This issue affects Lasa: from n/a through = 1.1...

TencentOS Server 4: ansible (TSSA-2024:1037)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:1037 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

CVE-2025-49280

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in unfoldwp Magty magty allows PHP Local File Inclusion.This issue affects Magty: from n/a through = 1.0.6...

PT-2025-24878 · Microsoft · Windows Security App

Name of the Vulnerable Software and Affected Versions: Windows Security App affected versions not specified Description: The issue allows an authorized attacker to perform spoofing locally by exploiting external control of file name or path in the Windows Security App. Recommendations: At the...

CVE-2025-46444

CVE-2025-46444 affects the Ads Pro Plugin for WordPress (Ads Pro Plugin: Multi-Purpose WordPress Advertising Manager), versions up to 4.88. Root cause: improper control of filenames for include/require statements, enabling PHP Local File Inclusion (LFI). Practical impact stated: PHP Local File In...