EUVD-2022-28515

Malicious code in bioql PyPI...

EUVD-2022-37395

Malicious code in bioql PyPI...

EUVD-2024-37262

Malicious code in bioql PyPI...

EUVD-2025-19891

Malicious code in bioql PyPI...

EUVD-2021-32947

Malicious code in bioql PyPI...

EUVD-2023-38225

Malicious code in bioql PyPI...

EUVD-2022-37810

Malicious code in bioql PyPI...

EUVD-2025-10807

Malicious code in bioql PyPI...

EUVD-2025-31697

Malicious code in bioql PyPI...

EUVD-2023-12416

Malicious code in bioql PyPI...

EUVD-2023-44278

Malicious code in bioql PyPI...

EUVD-2025-28900

Malicious code in bioql PyPI...

EUVD-2024-51979

Malicious code in bioql PyPI...

EUVD-2022-29637

Malicious code in bioql PyPI...

EUVD-2024-33349

Malicious code in bioql PyPI...

EUVD-2024-54559

Malicious code in bioql PyPI...

EUVD-2023-41194

Malicious code in bioql PyPI...

EUVD-2025-7714

Malicious code in bioql PyPI...

PT-2025-40349

Name of the Vulnerable Software and Affected Versions TRUfusion Enterprise versions through 7.10.4.0 Description The application uses a static key to encrypt the COOKIEID, which serves as an authentication mechanism for certain endpoints, such as /trufusionPortal/getProjectList. This allows for t...

CVE-2025-8625 Copypress Rest API 1.1 - 1.2 - Missing Configurable JWT Secret and File-Type Validation to Unauthenticated Remote Code Execution

The Copypress Rest API plugin for WordPress is vulnerable to Remote Code Execution via copyreaphandleimage Function in versions 1.1 to 1.2. The plugin falls back to a hard-coded JWT signing key when no secret is defined and does not restrict which file types can be fetched and saved as attachment...