EUVD-2025-7777

Malicious code in bioql PyPI...

EUVD-2021-28731

Malicious code in bioql PyPI...

EUVD-2022-6038

Malicious code in bioql PyPI...

EUVD-2022-4305

Malicious code in bioql PyPI...

EUVD-2025-27071

Malicious code in bioql PyPI...

EUVD-2022-53110

Malicious code in bioql PyPI...

EUVD-2025-26412

Malicious code in bioql PyPI...

EUVD-2022-2943

Malicious code in bioql PyPI...

EUVD-2022-7199

Malicious code in bioql PyPI...

EUVD-2025-9722

Malicious code in bioql PyPI...

EUVD-2024-3236

Malicious code in bioql PyPI...

EUVD-2022-2637

Malicious code in bioql PyPI...

EUVD-2023-0749

Malicious code in bioql PyPI...

EUVD-2022-1324

Malicious code in bioql PyPI...

EUVD-2022-38141

Malicious code in bioql PyPI...

org.apache.cxf/cxf: CXF JMS Code Execution Vulnerability

A flaw was found in org.apache.cxf/cxf, where untrusted users can configure JMS to allow the specification of RMI or LDAP URLs, possibly leading to code execution. This vulnerability allows an attacker to provide malicious protocol URLs during JMS configuration...

org.apache.cxf/cxf: CXF JMS Code Execution Vulnerability

A flaw was found in org.apache.cxf/cxf, where untrusted users can configure JMS to allow the specification of RMI or LDAP URLs, possibly leading to code execution. This vulnerability allows an attacker to provide malicious protocol URLs during JMS configuration...

org.apache.cxf/cxf: CXF JMS Code Execution Vulnerability

A flaw was found in org.apache.cxf/cxf, where untrusted users can configure JMS to allow the specification of RMI or LDAP URLs, possibly leading to code execution. This vulnerability allows an attacker to provide malicious protocol URLs during JMS configuration...

CRLF Injection

Overview aioftp is a ftp client/server for asyncio Affected versions of this package are vulnerable to CRLF Injection via the aioftp.Client.command method that lacks checks for CR/LF characters in command strings. An attacker can add the \r\n characters and inject additional headers in the FTP...

CVE-2025-56381: Improper Neutralization of Special Elements used in an SQL Command

ERPNEXT v15.67.0 was discovered to contain multiple SQL injection vulnerabilities in the /api/method/frappe.desk.reportview.get endpoint via the orderby and groupby parameters...