EUVD-2025-9898

Malicious code in bioql PyPI...

EUVD-2025-21508

Malicious code in bioql PyPI...

EUVD-2022-4622

Malicious code in bioql PyPI...

EUVD-2025-16790

Malicious code in bioql PyPI...

EUVD-2025-16301

Malicious code in bioql PyPI...

EUVD-2023-31603

Malicious code in bioql PyPI...

EUVD-2025-9897

Malicious code in bioql PyPI...

EUVD-2025-27138

Malicious code in bioql PyPI...

EUVD-2024-1119

Malicious code in bioql PyPI...

EUVD-2025-7107

Malicious code in bioql PyPI...

EUVD-2022-6654

Malicious code in bioql PyPI...

EUVD-2022-7150

Malicious code in bioql PyPI...

EUVD-2025-16761

Malicious code in bioql PyPI...

EUVD-2023-1378

Malicious code in bioql PyPI...

CVE-2025-56816

Datart 1.0.0-rc.3 is vulnerable to Directory Traversal via uploading YAML to config/jdbc-driver-ext.yml, parsed with SnakeYAML unsafe load/loadAs. This allows attacker-controlled YAML deserialization, potentially enabling remote code execution (RCE) under certain conditions. Exploitation details ...

CVE-2025-10770

A vulnerability was found in jeecgboot JimuReport up to 2.1.2. This impacts an unknown function of the file /drag/onlDragDataSource/testConnection of the component MySQL JDBC Handler. Performing manipulation results in deserialization. Remote exploitation of the attack is possible. The exploit ha...

CVE-2025-10771

A vulnerability was determined in jeecgboot JimuReport up to 2.1.2. Affected is an unknown function of the file /drag/onlDragDataSource/testConnection of the component DB2 JDBC Handler. Executing manipulation of the argument clientRerouteServerListJNDIName can lead to deserialization. The attack...

CVE-2025-6544

A deserialization vulnerability exists in h2oai/h2o-3 versions = 3.46.0.8, allowing attackers to read arbitrary system files and execute arbitrary code. The vulnerability arises from improper handling of JDBC connection parameters, which can be exploited by bypassing regular expression checks and...

pgjdbc: pgjdbc insecure authentication in channel binding

A connection handling flaw was found in the pgjdbc connection driver in configurations that require channel binding. Connections created with authentication methods that should not allow channel binding permit connections to use channel binding. This flaw allows attackers to position themselves i...

H2O affected by a deserialization vulnerability

A deserialization vulnerability exists in h2oai/h2o-3 versions = 3.46.0.7, allowing attackers to read arbitrary system files and execute arbitrary code. The vulnerability arises from improper handling of JDBC connection parameters, which can be exploited by bypassing regular expression checks and...