EUVD-2025-29113

Malicious code in bioql PyPI...

EUVD-2025-14835

Malicious code in bioql PyPI...

EUVD-2024-52678

Malicious code in bioql PyPI...

EUVD-2022-7429

Malicious code in bioql PyPI...

EUVD-2022-46558

Malicious code in bioql PyPI...

EUVD-2022-15956

Malicious code in bioql PyPI...

EUVD-2022-27900

Malicious code in bioql PyPI...

EUVD-2022-30724

Malicious code in bioql PyPI...

EUVD-2024-22989

Malicious code in bioql PyPI...

EUVD-2025-27158

Malicious code in bioql PyPI...

EUVD-2024-39538

Malicious code in bioql PyPI...

EUVD-2021-8782

Malicious code in bioql PyPI...

EUVD-2024-39819

Malicious code in bioql PyPI...

EUVD-2022-5496

Malicious code in bioql PyPI...

EUVD-2025-3137

Malicious code in bioql PyPI...

CVE-2025-59163 vet MCP Server SSE Transport DNS Rebinding Vulnerability

vet is an open source software supply chain security tool. Versions 1.12.4 and below are vulnerable to a DNS rebinding attack due to lack of HTTP Host and Origin header validation. Data from the vet scan sqlite3 database may be exposed to remote attackers when vet is used as an MCP server in SSE...

DNS Rebinding

Overview Affected versions of this package are vulnerable to DNS Rebinding due to insufficient validation of the Host and Origin headers. An attacker can gain unauthorized access to sensitive data by luring a victim to a malicious website, enabling the attacker to read information from the report...

SafeDep 安全漏洞

SafeDep is an open source package from SafeDep that prevents malicious open source. A security vulnerability exists in SafeDep version 1.12.4 and earlier, which stems from a lack of HTTP Host and Origin header validation and could lead to a DNS rebinding attack...

The vulnerability in the `include/linux/kvm_host.h` component of the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the include/linux/kvmhost.h component of the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

CVE-2025-59426 lobe-chat has an Open Redirect

Lobe Chat is an open-source artificial intelligence chat framework. Prior to version 1.130.1, the project's OIDC redirect handling logic constructs the host and protocol of the final redirect URL based on the X-Forwarded-Host or Host headers and the X-Forwarded-Proto value. In deployments where a...