EUVD-2022-32416

Malicious code in bioql PyPI...

EUVD-2022-32421

Malicious code in bioql PyPI...

EUVD-2022-32423

Malicious code in bioql PyPI...

EUVD-2022-53460

Malicious code in bioql PyPI...

EUVD-2022-30648

Malicious code in bioql PyPI...

EUVD-2022-32425

Malicious code in bioql PyPI...

EUVD-2022-31206

Malicious code in bioql PyPI...

EUVD-2022-33629

Malicious code in bioql PyPI...

EUVD-2025-7220

Malicious code in bioql PyPI...

EUVD-2022-31209

Malicious code in bioql PyPI...

EUVD-2025-23495

Malicious code in bioql PyPI...

EUVD-2025-9606

Malicious code in bioql PyPI...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the torch.nantonum function when used with .long to convert float"inf" in eager mode. An attacker can cause unexpected behavior by providing specially crafted input that triggers an integer overflow...

CVE-2025-8681

The CVE-2025-8681 entry describes a Stored XSS vulnerability in Pega Platform UI components affecting versions 7.1.0 through Infinity 24.2.2. A high-privilege user with a developer role is required to exploit. The issue stems from a stored XSS flaw in the user interface component, enabling inject...

PT-2025-37077

Name of the Vulnerable Software and Affected Versions: Pega Platform versions 7.1.0 through 24.2.2 Description: Pega Platform is affected by a Stored Cross-Site Scripting XSS issue within a user interface component. Exploitation requires a user with high privileges and a developer role...

MAL-2025-44698 Malicious code in infinity-dove-qev776-project (npm)

The package infinity-dove-qev776-project was found to contain malicious code...

Improper Input Validation

github.com/grafana/grafana-infinity-datasource is vulnerable to Improper Input Validation. The vulnerability is due to insufficient validation of allowed URL restrictions, which allows an attacker to bypass configured URL checks using a specially crafted URL...

Malicious code in frost-infinity-gyp730-project (npm)

The package frost-infinity-gyp730-project was found to contain malicious code...

Malicious code in zephyr-infinity-vya854-project (npm)

The package zephyr-infinity-vya854-project was found to contain malicious code...

Malicious code in lagoon-infinity-iyv611-project (npm)

The package lagoon-infinity-iyv611-project was found to contain malicious code...