EUVD-2018-17935

Malware in sbrugna...

EUVD-2019-4708

Malware in sbrugna...

EUVD-2025-7812

Malicious code in bioql PyPI...

EUVD-2023-51389

Malicious code in bioql PyPI...

EUVD-2024-53508

Malicious code in bioql PyPI...

EUVD-2025-27629

Malicious code in bioql PyPI...

EUVD-2022-3263

Malicious code in bioql PyPI...

EUVD-2025-24595

Malicious code in bioql PyPI...

EUVD-2022-47573

Malicious code in bioql PyPI...

EUVD-2023-51390

Malicious code in bioql PyPI...

EUVD-2025-7667

Malicious code in bioql PyPI...

EUVD-2022-5842

Malicious code in bioql PyPI...

EUVD-2025-9024

Malicious code in bioql PyPI...

EUVD-2025-2809

Malicious code in bioql PyPI...

EUVD-2022-46993

Malicious code in bioql PyPI...

EUVD-2025-29630

Malicious code in bioql PyPI...

Log Injection

Overview io.jenkins.lib:support-log-formatter is a Java logging formatter extracted to a standalone library. Affected versions of this package are vulnerable to Log Injection in the transformMessage function. An attacker can control log message contents by inserting line break characters CR, LF a...

CVE-2025-59050

Greenshot is an open source Windows screenshot utility. Greenshot 1.3.300 and earlier deserializes attacker-controlled data received in a WMCOPYDATA message using BinaryFormatter.Deserialize without prior validation or authentication, allowing a local process at the same integrity level to trigge...

CVE-2025-59050 Greenshot — Insecure .NET deserialization via WM_COPYDATA enables local code execution

Greenshot is an open source Windows screenshot utility. Greenshot 1.3.300 and earlier deserializes attacker-controlled data received in a WMCOPYDATA message using BinaryFormatter.Deserialize without prior validation or authentication, allowing a local process at the same integrity level to trigge...

CVE-2025-9910

Versions of the package jsondiffpatch before 0.7.2 are vulnerable to Cross-site Scripting XSS via HtmlFormatter::nodeBegin. An attacker can inject malicious scripts into HTML payloads that may lead to code execution if untrusted payloads were used as source for the diff, and the result renderer...