EUVD-2023-27835

Malicious code in bioql PyPI...

EUVD-2021-7992

Malicious code in bioql PyPI...

EUVD-2024-31573

Malicious code in bioql PyPI...

EUVD-2023-2081

Malicious code in bioql PyPI...

EUVD-2023-12528

Malicious code in bioql PyPI...

EUVD-2023-59106

Malicious code in bioql PyPI...

EUVD-2025-22136

Malicious code in bioql PyPI...

EUVD-2023-1598

Malicious code in bioql PyPI...

EUVD-2022-4555

Malicious code in bioql PyPI...

EUVD-2024-53442

Malicious code in bioql PyPI...

EUVD-2023-2922

Malicious code in bioql PyPI...

EUVD-2025-10030

Malicious code in bioql PyPI...

EUVD-2022-48755

Malicious code in bioql PyPI...

EUVD-2025-18095

Malicious code in bioql PyPI...

EUVD-2023-44109

Malicious code in bioql PyPI...

EUVD-2023-46075

Malicious code in bioql PyPI...

EUVD-2025-14836

Malicious code in bioql PyPI...

Security Bulletin: Vulnerabilities in Spring Cloud Gateway Server, Bouncy Castle, Reactor Netty HTTP Server, NPM and Apache Commons might affect IBM Storage Defender Copy Data Management

Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in Spring Cloud Gateway Server, Bouncy Castle, Reactor Netty HTTP Server, NPM and Apache Commons. Vulnerabilities include forwarded headers from untrusted proxies, opening up a possibility of DNS poisoning,...

CVE-2025-48208 Apache HertzBeat (incubating): Jmx JNDI injection vulnerability

Improper Neutralization of Special Elements used in an LDAP Query 'LDAP Injection' vulnerability in Apache HertzBeat . The attacker needs to have an authenticated account with access, and the attack can only be triggered by crafting custom commands. A successful attack would result in arbitrary...

CVE-2025-48208

CVE-2025-48208 describes an LDAP Injection vulnerability in Apache HertzBeat up to version 1.7.2. An attacker with an authenticated account can trigger the flaw by crafting custom LDAP queries, potentially resulting in arbitrary script execution. Remediation: upgrade to version 1.7.3 (fixes the i...