EUVD-2023-0757

Malicious code in bioql PyPI...

EUVD-2023-36829

Malicious code in bioql PyPI...

EUVD-2024-18121

Malicious code in bioql PyPI...

EUVD-2023-40842

Malicious code in bioql PyPI...

EUVD-2022-55257

Malicious code in bioql PyPI...

EUVD-2025-30453

Malicious code in bioql PyPI...

EUVD-2023-59085

Malicious code in bioql PyPI...

EUVD-2024-18027

Malicious code in bioql PyPI...

EUVD-2025-31595

Malicious code in bioql PyPI...

EUVD-2023-24348

Malicious code in bioql PyPI...

EUVD-2025-19353

Malicious code in bioql PyPI...

EUVD-2022-33931

Malicious code in bioql PyPI...

EUVD-2023-0595

Malicious code in bioql PyPI...

CVE-2023-53497

In the Linux kernel, the following vulnerability has been resolved: media: vsp1: Replace vb2isstreaming with vb2startstreamingcalled The vsp1 driver uses the vb2isstreaming function in its .bufqueue handler to check if the .startstreaming operation has been called, and decide whether to just add...

CVE-2025-59945 SysReptor Susceptible to Privilege Escalation by Authenticated Users

SysReptor is a fully customizable pentest reporting platform. In versions from 2024.74 to before 2025.83, authenticated and unprivileged non-admin users can assign the isprojectadmin permission to their own user. This allows users to read, modify and delete pentesting projects they are not member...

CVE-2025-59945

Vulnerability summary (CVE-2025-59945): SysReptor (Syslifters) versions 2024.74 through 2025.82 allow authenticated, non-admin users to grant themselves the is_project_admin privilege, enabling reading, modifying, and deleting pentest projects they are not members of. This is mitigated in version...

CVE-2025-59945 SysReptor Susceptible to Privilege Escalation by Authenticated Users

SysReptor is a fully customizable pentest reporting platform. In versions from 2024.74 to before 2025.83, authenticated and unprivileged non-admin users can assign the isprojectadmin permission to their own user. This allows users to read, modify and delete pentesting projects they are not member...

CVE-2025-9960

A restriction bypass vulnerability in is-localhost-ip could allow attackers to perform Server-Side Request Forgery SSRF. This issue affects is-localhost-ip: 2.0.0...

CVE-2025-9960 is-localhost-ip 2.0.0 - SSRF via Restrictions bypass

A restriction bypass vulnerability in is-localhost-ip could allow attackers to perform Server-Side Request Forgery SSRF. This issue affects is-localhost-ip: 2.0.0...

CVE-2025-9960

CVE-2025-9960 affects is-localhost-ip 2.0.0 and is a restriction bypass that enables SSRF. Public sources describe that is-localhost-ip can misclassify addresses, allowing localhost checks to be bypassed (e.g., IPv6-mapped IPv4 forms such as ::ffff:127.0.0.1) to access internal resources. Several...