EUVD-2022-25900

Malicious code in bioql PyPI...

EUVD-2023-49876

Malicious code in bioql PyPI...

EUVD-2025-27108

Malicious code in bioql PyPI...

EUVD-2025-32091

Malicious code in bioql PyPI...

EUVD-2025-28583

Malicious code in bioql PyPI...

EUVD-2025-27198

Malicious code in bioql PyPI...

EUVD-2025-24000

Malicious code in bioql PyPI...

EUVD-2025-24144

Malicious code in bioql PyPI...

EUVD-2025-24844

Malicious code in bioql PyPI...

EUVD-2025-27460

Malicious code in bioql PyPI...

EUVD-2025-25055

Malicious code in bioql PyPI...

EUVD-2025-24560

Malicious code in bioql PyPI...

EUVD-2025-25272

Malicious code in bioql PyPI...

EUVD-2025-25287

Malicious code in bioql PyPI...

EUVD-2025-25397

Malicious code in bioql PyPI...

EUVD-2025-24575

Malicious code in bioql PyPI...

EUVD-2025-24886

Malicious code in bioql PyPI...

CVE-2025-61604 WeGIA: Cross-Site Request Forgery (CSRF) Vulnerability in `control.php` Endpoint

WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain a Cross-Site Request Forgery CSRF vulnerability. The delete operation for the Almoxarifado entity is exposed via HTTP GET without CSRF protection, allowing a third-party site to trigger...

netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions

A flaw in Netty’s HTTP/1.1 chunked encoding parser allows newline LF characters in chunk extensions to be incorrectly treated as the end of the chunk-size line instead of requiring the proper CRLF sequence. This discrepancy can be exploited in rare cases where a reverse proxy interprets the same...

netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability

A flaw was found in Netty where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the "MadeYouReset" attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts...