EUVD-2025-20006

Malicious code in bioql PyPI...

EUVD-2025-28547

Malicious code in bioql PyPI...

EUVD-2025-30761

Malicious code in bioql PyPI...

EUVD-2025-12082

Malicious code in bioql PyPI...

EUVD-2023-1206

Malicious code in bioql PyPI...

EUVD-2022-6975

Malicious code in bioql PyPI...

EUVD-2025-15752

Malicious code in bioql PyPI...

EUVD-2024-48360

Malicious code in bioql PyPI...

EUVD-2025-10553

Malicious code in bioql PyPI...

CVE-2025-34226: Improper Control of a Resource Through its Lifetime

OpenPLC Runtime v3 contains an input validation flaw in the /upload-program-action endpoint: the epochtime field supplied during program uploads is not validated and can be crafted to induce corruption of the programs database. After a successful malformed upload the runtime continues to operate...

CVE-2025-11153: Improper Control of Generation of Code

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 143.0.3...

The vulnerability of the destroy_unused_implicit_child_mr() function in the mlx5/odp.c component of the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the destroyunusedimplicitchildmr function in the mlx5/odp.c component of the Linux kernel is related to improper control of resource identifiers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel, related to improper control of resource identifiers, allows attackers to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to improper control of resource identifiers. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the arm64 component of the Linux operating system’s kernel, which allows a hacker to trigger a service failure

The vulnerability of the arm64 component in the Linux operating system is related to improper control of resource identifiers. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2025-38962

Name of the Vulnerable Software and Affected Versions WP User Frontend versions through 4.1.11 Description An improper control of generation of code issue, specifically a code injection, exists in WP User Frontend. This allows for code injection. Recommendations Update WP User Frontend to a versi...

CVE-2025-58673: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability in weDevs WP User Frontend wp-user-frontend allows Code Injection.This issue affects WP User Frontend: from n/a through = 4.1.12...

The vulnerability of the FFmpeg multimedia library, related to improper control of resource identifiers (“resource injection”), allows attackers to gain unauthorized access to protected information and compromise its integrity.

The vulnerability of the FFmpeg multimedia library is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information and compromise its integrity...

CVE-2024-45433

OpenSynergy BlueSDK aka Blue SDK through 6.x has Incorrect Control Flow Scoping. The specific flaw exists within the BlueSDK Bluetooth stack. The issue results from the lack of proper return control flow after detecting an unusual condition. An attacker can leverage this to bypass a security...

PT-2025-36166

Name of the Vulnerable Software and Affected Versions: PickPlugins Job Board Manager versions through 2.1.61 Description: An improper control of generation of code 'Code Injection' vulnerability exists in PickPlugins Job Board Manager. This vulnerability allows code injection. Recommendations:...

CVE-2025-58206: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeMove MaxCoach maxcoach allows PHP Local File Inclusion.This issue affects MaxCoach: from n/a through = 3.2.5...