EUVD-2025-21801

Malicious code in bioql PyPI...

EUVD-2022-27375

Malicious code in bioql PyPI...

EUVD-2023-40770

Malicious code in bioql PyPI...

EUVD-2022-51935

Malicious code in bioql PyPI...

EUVD-2025-17441

Malicious code in bioql PyPI...

EUVD-2022-36332

Malicious code in bioql PyPI...

EUVD-2024-53581

Malicious code in bioql PyPI...

EUVD-2021-6655

Malicious code in bioql PyPI...

EUVD-2025-12285

Malicious code in bioql PyPI...

EUVD-2024-3365

Malicious code in bioql PyPI...

Improper Validation of Function Hook Arguments

Overview Affected versions of this package are vulnerable to Improper Validation of Function Hook Arguments in the /api/webhook endpoint via the affectedRevisionInfo function. An attacker can cause the server process to crash and disrupt service availability by sending a Gogs push event whose JSO...

CVE-2025-10954

Versions of the package github.com/nyaruka/phonenumbers before 1.2.2 are vulnerable to Improper Validation of Syntactic Correctness of Input in the phonenumbers.Parse function. An attacker can cause a panic by providing crafted input causing a "runtime error: slice bounds out of range"...

Path Traversal

org.opencastproject, opencast-user-interface-configuration is vulnerable to path traversal. The vulnerability is due to insufficient protections in the UI config module where the path is checked without validating the file separator, which allows an attacker to access files within other folders...

CVE-2025-58317 File Parsing Memory Corruption in CNCSoft-G2

Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process...

CVE-2025-20314: Improper Handling of Undefined Values

A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to an affected device to execute persistent code at boot time and break the chain of trust. This vulnerability is due to improper...

CVE-2025-10412

The Product Options and Price Calculation Formulas for WooCommerce – Uni CPO Premium plugin for WordPress is vulnerable to arbitrary file uploads due to misconfigured file type validation in the 'unicpouploadfile' function in all versions up to, and including, 4.9.55. This makes it possible for...

CVE-2025-36202 IBM webMethods Integration code execution

IBM webMethods Integration 10.15 and 11.1 could allow an authenticated user with required execute Services to execute commands on the system due to the improper validation of format string strings passed as an argument from an external source...

JetBrains TeamCity Information Disclosure

The vulnerability of the Continuous Integration and Deployment Application Delivery system CI/CD of JetBrains TeamCity is related to improper validation of the data entered by users against a list of allowed values. Exploiting this vulnerability can allow an attacker to disclose protected...

SUSE-SU-2025:03281-1 Security update for cmake

This update for cmake fixes the following issues: - CVE-2025-9301: Fixed assertion failure due to improper validation bsc1248461...

JetBrains Junie Command Injection Vulnerability

JetBrains Junie is a coding agent of the Czech company JetBrains. JetBrains Junie suffers from a command injection vulnerability that stems from improper command validation, which can be exploited by an attacker to cause code execution...