EUVD-2025-6017

Malicious code in bioql PyPI...

EUVD-2025-30969

Malicious code in bioql PyPI...

EUVD-2025-6824

Malicious code in bioql PyPI...

EUVD-2025-7055

Malicious code in bioql PyPI...

EUVD-2023-41184

Malicious code in bioql PyPI...

EUVD-2023-56239

Malicious code in bioql PyPI...

EUVD-2024-45879

Malicious code in bioql PyPI...

EUVD-2025-7084

Malicious code in bioql PyPI...

EUVD-2023-41186

Malicious code in bioql PyPI...

EUVD-2023-49384

Malicious code in bioql PyPI...

EUVD-2025-19420

Malicious code in bioql PyPI...

EUVD-2025-22352

Malicious code in bioql PyPI...

CVE-2025-23348

NVIDIA Megatron-LM for all platforms contains a vulnerability in the pretraingpt script, where malicious data created by an attacker may cause a code injection issue. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data...

Arbitrary Code Injection

Overview megatron-core is a Megatron Core - a library for efficient and scalable training of transformer based models Affected versions of this package are vulnerable to Arbitrary Code Injection in the pretraingpt script. An attacker can execute arbitrary code, escalate privileges, access sensiti...

CVE-2025-23348

CVE-2025-23348 affects NVIDIA Megatron-LM across platforms, with a vulnerability in the pretrain_gpt script where malicious input data may trigger code injection, potentially enabling code execution, privilege escalation, information disclosure, and data tampering. Documents consistently identify...

PT-2025-39260

Name of the Vulnerable Software and Affected Versions NVIDIA Megatron-LM affected versions not specified Description The software contains a flaw in the pretrain gpt script that could allow an attacker to inject code through maliciously crafted data. Exploitation of this issue may result in code...

CVE-2025-47906 vulnerabilities

Vulnerabilities for packages: vault-k8s, checksec, ctop, docker-credential-ecr-login, gostatsd, k8sgpt-operator, rancher-machine, grafana-operator, custom-pod-autoscaler-operator, bank-vaults, linkerd2-proxy-init, confluent-common-docker, hivemind, cloud-provider-aws, dagdotdev,...

CVE-2025-50709

An issue in Perplexity AI GPT-4 allows a remote attacker to obtain sensitive information via a GET parameter...

CVE-2025-50709

An issue in Perplexity AI GPT-4 allows a remote attacker to obtain sensitive information via a GET parameter...

PT-2025-38157

Name of the Vulnerable Software and Affected Versions: Perplexity AI GPT-4 affected versions not specified Description: An issue in Perplexity AI GPT-4 allows a remote attacker to obtain sensitive information via a GET parameter. Recommendations: At the moment, there is no information about a new...