EUVD-2023-44546

Malicious code in bioql PyPI...

EUVD-2023-33706

Malicious code in bioql PyPI...

EUVD-2022-6492

Malicious code in bioql PyPI...

EUVD-2022-6602

Malicious code in bioql PyPI...

EUVD-2024-53001

Malicious code in bioql PyPI...

EUVD-2022-5767

Malicious code in bioql PyPI...

EUVD-2023-1761

Malicious code in bioql PyPI...

EUVD-2022-1967

Malicious code in bioql PyPI...

EUVD-2025-11206

Malicious code in bioql PyPI...

EUVD-2025-30391

Malicious code in bioql PyPI...

EUVD-2025-29750

Malicious code in bioql PyPI...

EUVD-2022-55179

Malicious code in bioql PyPI...

EUVD-2022-55269

Malicious code in bioql PyPI...

aldryn-django (>=4.2.10.0 <=4.2.18.0), alertwise (=1.0.0) +113 more potentially affected by CVE-2025-59682 via django (>=4.2.0 <=4.2.24)

django PYPI version =4.2.0, =4.2.10.0, =65.10.0, =7.5.1, =1.0.2, =0.0.1, =1.3.9, =0.4.0, =0.0.1, =4.16.2, =4.8.0, =0.0.4.dev0, =8.0.0, =8.5.1 and more Source cves: CVE-2025-59682 Source advisory: OSV:GHSA-Q95W-C7QG-HRFF...

American Fuzzy Lop plus plus 4.34c

Google's American Fuzzy Lop is a brute-force fuzzer coupled with an exceedingly simple but rock-solid instrumentation-guided genetic algorithm. afl++ is a superior fork to Google's afl. It has more speed, more and better mutations, more and better instrumentation, custom module support, etc...

PT-2025-42266

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to memory management and swap operations. Specifically, a race condition between fork and swapoff can lead to a kernel NULL pointer dereference...

CVE-2025-10777

CVE-2025-10777 affects the JSC R7 R7-Office Document Server (versions up to 20250820). A flaw in an unknown function of the file /downloadas/ allows remote exploitation by manipulating the cmd argument to trigger a path traversal. The vendor confirms this vulnerability and specifies a fix in rele...

CVE-2025-58432

ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.4.1 and all prior versions, the /v21/files/file/uploadV2 endpoint allows file upload from ANY USER who has access to localhost. File uploads are performed AS ROOT...

CVE-2025-58431

ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.4.1 and earlier, the /v21/files/file/download endpoint allows file read from ANY USER who has access to localhost. File reads are performed AS ROOT...

Prototype Pollution

Overview expr-eval-fork is a Mathematical expression evaluator fork with prototype pollution fix Affected versions of this package are vulnerable to Prototype Pollution via the evaluation process, which accesses global values by searching for item.value in expr.functions. An attacker can access...