EUVD-2023-55036

Malicious code in bioql PyPI...

EUVD-2022-15505

Malicious code in bioql PyPI...

EUVD-2023-33032

Malicious code in bioql PyPI...

PT-2025-40492

Name of the Vulnerable Software and Affected Versions WordPress TextBuilder plugin versions 1.0.0 through 1.1.1 Description The software is susceptible to Cross-Site Request Forgery due to missing or incorrect nonce validation. An unauthenticated attacker can update a user's authorization token b...

GitFlic Platform Auth Bypass

The vulnerability of the GitFlic platform’s code-related functionality lies in the lack of authentication. Exploiting this vulnerability allows a malicious actor to remotely execute arbitrary HTTP requests on behalf of the server...

GitFlic Platform Authentication Bypass Info Disclosure

The vulnerability of the GitFlic platform’s code-related functionality lies in the lack of authentication. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

CVE-2025-54315: Improper Enforcement of a Single, Unique Action

The Matrix specification before 1.16 i.e., with a room version before 12 lacks create event uniqueness...

CVE-2025-56513: Download of Code Without Integrity Check

NiceHash QuickMiner 6.12.0 perform software updates over HTTP without validating digital signatures or hash checks. An attacker capable of intercepting or redirecting traffic to the update url and can hijack the update process and deliver arbitrary executables that are automatically executed,...

iMonitor EAM security vulnerability

iMonitor EAM is an employee computer network activity monitoring software from iMonitor USA. A security vulnerability exists in iMonitor EAM version 9.6394, which stems from the failure to use authentication or encryption during communication, which could lead to the disclosure of sensitive...

Ericsson Indoor Connect security vulnerability

Ericsson Indoor Connect is an indoor compact base station from Ericsson Sweden. A security vulnerability exists in Ericsson Indoor Connect 8855, which stems from a lack of authorization and could lead to elevated privileges...

Framework Android Disclosure

The vulnerability of the Framework component in Android operating systems is related to the absence of authentication procedures. Exploiting this vulnerability can allow attackers to disclose protected information...

CGA-R5P4-RHJ5-3FQ7

Bulletin has no description...

Shortcuts Component Privilege Escalation

The vulnerability of the Shortcuts component in operating systems such as MacOS, iPadOS, and iOS is related to the lack of authentication. Exploiting this vulnerability can allow attackers to bypass existing security restrictions and gain increased privileges...

Android Authentication Privilege Escalation

The vulnerability of the Android operating system is related to the lack of authentication. Exploiting this vulnerability can allow a hacker to increase their privileges...

CVE-2025-9983

The CVE-2025-9983 affects GALAYOU G2 IP cameras, where RTSP streams can be accessed without valid credentials. The issue arises because default credentials are not required to access streams, and changing them does not affect behavior, indicating an authentication bypass in the RTSP service. Affe...

WordPress plugin Custom Login URL security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

DTM Soft Deserialization Code Execution

The vulnerability of the DTM Soft software for PLC programming and the DTN Soft software for industrial control systems is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2025-10458: Improper Handling of Length Parameter Inconsistency

Parameters are not validated or sanitized, and are later used in various internal operations...

CVE-2025-9565

The CVE concerns the WordPress Blocksy Companion plugin. All versions up to 2.1.10 are affected via the blocksy_newsletter_subscribe shortcode due to insufficient input sanitization and output escaping, allowing authenticated users with contributor-level access or higher to inject arbitrary scrip...

CVE-2025-7994: Out-of-bounds Read

Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must...