EUVD-2013-7190

Malware in sbrugna...

EUVD-2020-30117

Malware in sbrugna...

EUVD-2020-28939

Malware in sbrugna...

EUVD-2021-12214

Malware in sbrugna...

EUVD-2021-15266

Malware in sbrugna...

EUVD-2013-4178

Malware in sbrugna...

EUVD-2022-52094

Malicious code in bioql PyPI...

EUVD-2025-25771

Malicious code in bioql PyPI...

EUVD-2021-33363

Malicious code in bioql PyPI...

EUVD-2024-33069

Malicious code in bioql PyPI...

EUVD-2022-0158

Malicious code in bioql PyPI...

EUVD-2024-47130

Malicious code in bioql PyPI...

EUVD-2022-0119

Malicious code in bioql PyPI...

EUVD-2023-0496

Malicious code in bioql PyPI...

EUVD-2022-27101

Malicious code in bioql PyPI...

CVE-2025-7647 Insecure Temporary File Handling in run-llama/llama_index

The llama-index-core package, up to version 0.12.44, contains a vulnerability in the getcachedir function where a predictable, hardcoded directory path /tmp/llamaindex is used on Linux systems without proper security controls. This vulnerability allows attackers on multi-user systems to steal...

CVE-2025-34194 Vasion Print (formerly PrinterLogic) Local Privilege Escalation via Insecure Temporary File Handling

Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 25.1.102 and Application versions prior to 25.1.1413 Windows client deployments contain an insecure temporary-file handling vulnerability in the PrinterInstallerClient components. The software creates files as NT...

CVE-2025-9474 Mihomo Party Socket sysproxy.ts enableSysProxy temp file

A vulnerability was detected in Mihomo Party up to 1.8.1 on macOS. Affected is the function enableSysProxy of the file src/main/sys/sysproxy.ts of the component Socket Handler. The manipulation results in creation of temporary file with insecure permissions. The attack requires a local approach...

CVE-2022-4817

A vulnerability was found in centic9 jgit-cookbook. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to insecure temporary file. The attack can be initiated remotely. The name of the patch is b8cb29b43dc704708d598c60ac1881db7cf8e9c3. It is...

CVE-2022-24913

Versions of the package com.fasterxml.util:java-merge-sort before 1.1.0 are vulnerable to Insecure Temporary File in the StdTempFileProvider function in StdTempFileProvider.java, which uses the permissive File.createTempFile function, exposing temporary file contents...