EUVD-2025-17672

Malicious code in bioql PyPI...

EUVD-2025-18523

Malicious code in bioql PyPI...

CVE-2025-49508

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in LoftOcean CozyStay cozystay allows PHP Local File Inclusion.This issue affects CozyStay: from n/a through 1.7.1...

CVE-2025-49508

CVE-2025-49508 is an Unauthenticated Local File Inclusion in CozyStay WordPress Theme prior to version 1.7.1 due to improper control of filenames in Include/Require statements (PHP Remote File Inclusion). Affected: CozyStay

PT-2025-25714 · Unknown · Loftocean Cozystay

Name of the Vulnerable Software and Affected Versions: LoftOcean CozyStay affected versions not specified Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File...

CVE-2025-49507

Deserialization of Untrusted Data vulnerability in LoftOcean CozyStay cozystay allows Object Injection.This issue affects CozyStay: from n/a through 1.7.1...

CVE-2025-49507

CVE-2025-49507 corresponds to a PHP Object Injection in the WordPress CozyStay theme. Multiple sources confirm CozyStay versions prior to 1.7.1 are affected by a deserialization of untrusted data vulnerability that can lead to code execution. Public advisories consistently cite CozyStay < 1.7....

PT-2025-24655 · Loftocean · Loftocean Cozystay

Name of the Vulnerable Software and Affected Versions: LoftOcean CozyStay versions prior to 1.7.1 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions prior to 1.7.1, update to version 1.7.1 or later to resolve the...