EUVD-2022-34173

Malicious code in bioql PyPI...

EUVD-2023-28489

Malicious code in bioql PyPI...

EUVD-2023-45652

Malicious code in bioql PyPI...

EUVD-2023-53545

Malicious code in bioql PyPI...

EUVD-2022-31699

Malicious code in bioql PyPI...

EUVD-2024-30472

Malicious code in bioql PyPI...

EUVD-2021-7616

Malicious code in bioql PyPI...

EUVD-2022-5995

Malicious code in bioql PyPI...

EUVD-2023-31108

Malicious code in bioql PyPI...

EUVD-2024-52403

Malicious code in bioql PyPI...

EUVD-2022-45324

Malicious code in bioql PyPI...

EUVD-2022-38157

Malicious code in bioql PyPI...

EUVD-2024-43149

Malicious code in bioql PyPI...

EUVD-2025-9406

Malicious code in bioql PyPI...

EUVD-2025-16955

Malicious code in bioql PyPI...

UBUNTU-CVE-2025-39921

In the Linux kernel, the following vulnerability has been resolved: spi: microchip-core-qspi: stop checking viability of op-maxfreq in supportsop callback In commit 13529647743d9 "spi: microchip-core-qspi: Support per spi-mem operation frequency switches" the logic for checking the viability of...

Arbitrary Code Injection

Craft CMS is vulnerable to Arbitrary Code Injection. The vulnerability is due to inadequate protection of restore functionality because, with a compromised security key and the ability to place an arbitrary file in storage/backups, an attacker can craft a request to /updater/restore-db that...

CVE-2025-6724

In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in multiple services via improperly neutralized inputs used in an SQL command...

CVE-2025-6724

In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in multiple services via improperly neutralized inputs used in an SQL command...

CVE-2025-8868 Chef Automate compliance service SQL Injection Vulnerability

In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in the compliance service via improperly neutralized inputs used in an SQL command using a well-known token...