EUVD-2025-18473

Malicious code in bioql PyPI...

EUVD-2025-18476

Malicious code in bioql PyPI...

EUVD-2025-18480

Malicious code in bioql PyPI...

EUVD-2023-59360

Malicious code in bioql PyPI...

EUVD-2025-18457

Malicious code in bioql PyPI...

EUVD-2022-6130

Malicious code in bioql PyPI...

EUVD-2022-5897

Malicious code in bioql PyPI...

EUVD-2024-48961

Malicious code in bioql PyPI...

EUVD-2024-27853

Malicious code in bioql PyPI...

EUVD-2025-18434

Malicious code in bioql PyPI...

EUVD-2025-18439

Malicious code in bioql PyPI...

EUVD-2025-19701

Malicious code in bioql PyPI...

EUVD-2023-59394

Malicious code in bioql PyPI...

CVE-2025-59538: Uncaught Exception

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. For versions 2.9.0-rc1 through 2.14.19, 3.0.0-rc1 through 3.2.0-rc1, 3.1.6 and 3.0.17, when the webhook.azuredevops.username and webhook.azuredevops.password are not set in the default configuration, the /api/webhook endpoi...

SUSE CVE-2025-9648

A vulnerability in the CivetWeb library's function mghandleformrequest allows remote attackers to trigger a denial of service DoS condition. By sending a specially crafted HTTP POST request containing a null byte in the payload, the server enters an infinite loop during form data parsing. Multipl...

CVE-2025-30247

An OS command injection vulnerability in user interface in Western Digital My Cloud firmware prior to 5.31.108 on NAS platforms allows remote attackers to execute arbitrary system commands via a specially crafted HTTP POST...

CVE-2025-30247

CVE-2025-30247 is an OS command injection in the web UI of Western Digital My Cloud NAS on firmware prior to 5.31.108. A remote attacker can execute arbitrary system commands via a specially crafted HTTP POST. Affected products are Western Digital My Cloud firmware versions before 5.31.108. The C...

CVE-2025-9648

A vulnerability in the CivetWeb library's function mghandleformrequest allows remote attackers to trigger a denial of service DoS condition. By sending a specially crafted HTTP POST request containing a null byte in the payload, the server enters an infinite loop during form data parsing. Multipl...

CVE-2025-9648 Denial of Service in CivetWeb

A vulnerability in the CivetWeb library's function mghandleformrequest allows remote attackers to trigger a denial of service DoS condition. By sending a specially crafted HTTP POST request containing a null byte in the payload, the server enters an infinite loop during form data parsing. Multipl...

CVE-2025-30247: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability in user interface in Western Digital My Cloud firmware prior to 5.31.108 on NAS platforms allows remote attackers to execute arbitrary system commands via a specially crafted HTTP POST...