EUVD-2025-24363

Malicious code in bioql PyPI...

EUVD-2021-32244

Malicious code in bioql PyPI...

EUVD-2024-34587

Malicious code in bioql PyPI...

EUVD-2021-7420

Malicious code in bioql PyPI...

EUVD-2024-19235

Malicious code in bioql PyPI...

EUVD-2022-30256

Malicious code in bioql PyPI...

EUVD-2024-2443

Malicious code in bioql PyPI...

EUVD-2025-31645

Malicious code in bioql PyPI...

EUVD-2024-18556

Malicious code in bioql PyPI...

EUVD-2024-0265

Malicious code in bioql PyPI...

Improper Check or Handling of Exceptional Conditions

Overview Affected versions of this package are vulnerable to Improper Check or Handling of Exceptional Conditions in the /api/webhook endpoint. An attacker can cause the server process to crash by sending an Azure DevOps Push event with an empty resource.refUpdates array. Note: This is only...

CVE-2025-54477 Joomla! Core - [20250902] User-Enumeration in passkey authentication method

Improper handling of authentication requests lead to a user enumeration vector in the passkey authentication method...

CVE-2025-54477

CVE-2025-54477 describes an issue in Joomla! where the authentication request handling in the passkey method allows user enumeration. The initial entry cites an improper handling of authentication requests leading to a user enumeration vector, with a CVSS v3.1 base score of 5.3 (Network attack, n...

PT-2025-40004

Name of the Vulnerable Software and Affected Versions affected versions not specified Description Improper handling of authentication requests results in a user enumeration vector within the passkey authentication method. This allows an attacker to potentially identify valid users. Recommendation...

CVE-2025-45376

Dell Repository Manager DRM, versions 3.4.7 and 3.4.8, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2025-45376

Dell Repository Manager (DRM) versions 3.4.7–3.4.8 are affected by an Improper Handling of Insufficient Permissions that could allow a local, low-privilege attacker to elevate privileges. The underlying issue is privilege handling rather than remote access, and exploitation is described as local ...

CVE-2025-52906 TOTOLINK X6000R Command Injection Vulnerability

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1360B20241207...

PYSEC-2025-152

An Improper Handling of Exceptional Conditions vulnerability in the ZIP archive scanning component of mmaitre314 picklescan allows a remote attacker to bypass security scans. This is achieved by crafting a ZIP archive containing a file with a bad Cyclic Redundancy Check CRC, which causes the...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the incorrect handling of the ilog2 parameter, which could result in an out-of-bounds shift...

Armalife SQL注入漏洞

Armalife is an online fashion retail software from Armalife Turkey. A SQL injection vulnerability exists in Armalife 20250916 and earlier versions, which stems from improper neutralization of special elements in SQL commands, and could lead to SQL injection and disclosure of sensitive information...