EUVD-2017-9980

Malware in sbrugna...

EUVD-2017-9966

Malware in sbrugna...

EUVD-2017-9999

Malware in sbrugna...

EUVD-2017-9997

Malware in sbrugna...

EUVD-2022-15936

Malicious code in bioql PyPI...

EUVD-2025-25431

Malicious code in bioql PyPI...

EUVD-2024-1049

Malicious code in bioql PyPI...

EUVD-2022-15935

Malicious code in bioql PyPI...

EUVD-2024-1318

Malicious code in bioql PyPI...

EUVD-2022-4257

Malicious code in bioql PyPI...

EUVD-2024-1247

Malicious code in bioql PyPI...

EUVD-2023-33996

Malicious code in bioql PyPI...

EUVD-2024-1339

Malicious code in bioql PyPI...

Mattermost Server 9.11.x < 9.11.18 / 10.5.x < 10.5.9 / 10.11.0 Authorization Bypass (MMSA-2025-00502)

The version of Mattermost Server installed on the remote host is affected by a vulnerability as referenced in the MMSA-2025-00502 advisory. - Mattermost versions 10.5.x = 10.5.9 and 9.11.x = 9.11.17 fail to properly validate access controls which allows any authenticated user to download sensitiv...

Mattermost Server 10.5.x < 10.5.10 / 10.11.0 URL Redirection (MMSA-2025-00511)

The version of Mattermost Server installed on the remote host is affected by a vulnerability as referenced in the MMSA-2025-00511 advisory. - Mattermost versions 10.5.x = 10.5.9 fail to properly validate redirect URLs which allows attackers to redirect users to malicious sites via crafted OAuth...

Mattermost Server 10.5.x < 10.5.10 / 10.9.x < 10.9.5 / 10.10.x < 10.10.2 / 10.11.0 URL Redirection (MMSA-2025-00509)

The version of Mattermost Server installed on the remote host is affected by a vulnerability as referenced in the MMSA-2025-00509 advisory. - Mattermost versions 10.10.x = 10.10.1, 10.5.x = 10.5.9, 10.9.x = 10.9.4 fail to validate the redirectto parameter, allowing an attacker to craft a maliciou...

Mattermost Server 10.10.x < 10.10.2 / 10.11.0 Missing Authorization (MMSA-2025-00513)

The version of Mattermost Server installed on the remote host is affected by a vulnerability as referenced in the MMSA-2025-00513 advisory. - Mattermost versions 10.10.x = 10.10.1 fail to properly sanitize user data during shared channel membership synchronization, which allows malicious or...

GO-2025-3977 Mattermost Path Traversal vulnerability in github.com/mattermost/mattermost-server

Mattermost Path Traversal vulnerability in github.com/mattermost/mattermost-server...

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the boards plugin download endpoint. An attacker can access and download files belonging to other users by enumerating UUIDs. Remediation Upgrade...

SUSE CVE-2025-9076

Mattermost versions 10.10.x = 10.10.1 fail to properly sanitize user data during shared channel membership synchronization, which allows malicious or compromised remote clusters to access sensitive user information via unsanitized user objects. This vulnerability affects Mattermost Server instanc...