EUVD-2022-39596

Malicious code in bioql PyPI...

EUVD-2021-32479

Malicious code in bioql PyPI...

EUVD-2025-10422

Malicious code in bioql PyPI...

EUVD-2025-25433

Malicious code in bioql PyPI...

EUVD-2025-29076

Malicious code in bioql PyPI...

EUVD-2022-36089

Malicious code in bioql PyPI...

EUVD-2022-43389

Malicious code in bioql PyPI...

EUVD-2022-53002

Malicious code in bioql PyPI...

EUVD-2023-40243

Malicious code in bioql PyPI...

EUVD-2025-24156

Malicious code in bioql PyPI...

EUVD-2023-45351

Malicious code in bioql PyPI...

mysql-selinux and mysql8.4 security update

An update is available for mysql8.4, mysql-selinux. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list MySQL is a multi-user, multi-threaded SQL database server...

ALSA-2025:16861 Moderate: mysql:8.0 security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. Security Fixes: mysql: mysqldump unspecified vulnerability CPU Apr 2025 CVE-2025-30722 mysql: Optimizer unspecified vulnerability CPU Apr 2025...

Exposure of Information Through Directory Listing

Overview @mastra/mcp-docs-server is a MCP server for accessing Mastra.ai documentation, changelogs, and news. Affected versions of this package are vulnerable to Exposure of Information Through Directory Listing via the execute function. An attacker can access sensitive directory listings by...

EDIMAX N300 MP Code Execution

The vulnerability of the mp function in Microprogrammed Software Routers of EDIMAX N300 is related to the lack of measures taken for data cleaning at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

TOTOLINK EX1200T Main Function Command Execution

The vulnerability of the main function in TOTOLINK EX1200T microcontroller-based routers lies in the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Moderate: mysql:8.4 security update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. Security Fixes: openssl: Timing side-channel in ECDSA signature computation CVE-2024-13176 mysql: mysqldump unspecified vulnerability CPU Apr 2025...

PHP xmlNodeSetName() DoS

The vulnerability of the xmlNodeSetName function in the PHP programming language is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-30064 Possibility to generate a session for any user via the "ex:action" parameter after obtaining access to the JWT key

An insufficiently secured internal function allows session generation for arbitrary users. The decodeParam function checks the JWT but does not verify which signing algorithm was used. As a result, an attacker can use the "ex:action" parameter in the VerifyUserByThrustedService function to genera...

PT-2025-34858 · Unknown · Verifyuserbythrustedservice

Name of the Vulnerable Software and Affected Versions: versions prior to 2.3 Description: An insufficiently secured internal function allows session generation for arbitrary users. The decodeParam function checks the JWT but does not verify which signing algorithm was used. An attacker can use th...