EUVD-2025-24680

Malicious code in bioql PyPI...

EUVD-2022-6324

Malicious code in bioql PyPI...

EUVD-2024-47868

Malicious code in bioql PyPI...

EUVD-2022-38177

Malicious code in bioql PyPI...

EUVD-2021-7482

Malicious code in bioql PyPI...

EUVD-2021-9375

Malicious code in bioql PyPI...

EUVD-2025-25124

Malicious code in bioql PyPI...

EUVD-2025-25631

Malicious code in bioql PyPI...

EUVD-2021-7830

Malicious code in bioql PyPI...

EUVD-2023-37986

Malicious code in bioql PyPI...

EUVD-2022-39557

Malicious code in bioql PyPI...

EUVD-2021-7860

Malicious code in bioql PyPI...

EUVD-2025-27610

Malicious code in bioql PyPI...

EUVD-2024-39344

Malicious code in bioql PyPI...

EUVD-2025-5472

Malicious code in bioql PyPI...

EUVD-2022-15447

Malicious code in bioql PyPI...

Ghost vulnerable to Server Side Request Forgery (SSRF) via oEmbed Bookmark

Impact A vulnerability in Ghost's oEmbed mechanism allows staff users to exfiltrate data from internal systems via SSRF. Vulnerable versions This vulnerability is present in Ghost v5.99.0 to v5.130.3 to and Ghost v6.0.0 to v6.0.8. Patches v5.130.4 and v6.0.9 contain a fix for this issue. Referenc...

GHSA-F7QG-XJ45-W956 Ghost vulnerable to Server Side Request Forgery (SSRF) via oEmbed Bookmark

Impact A vulnerability in Ghost's oEmbed mechanism allows staff users to exfiltrate data from internal systems via SSRF. Vulnerable versions This vulnerability is present in Ghost v5.99.0 to v5.130.3 to and Ghost v6.0.0 to v6.0.8. Patches v5.130.4 and v6.0.9 contain a fix for this issue. Referenc...

CVE-2025-8557

An internal product security audit of Lenovo XClarity Orchestrator LXCO discovered the below vulnerability: An attacker with access to a device on the local Lenovo XClarity Orchestrator LXCO network segment may be able to manipulate the local device to create an alternate communication channel...

CVE-2025-54376

Hoverfly is an open source API simulation tool. In versions 1.11.3 and prior, Hoverfly’s admin WebSocket endpoint /api/v2/ws/logs is not protected by the same authentication middleware that guards the REST admin API. Consequently, an unauthenticated remote attacker can stream real-time applicatio...