EUVD-2022-49967

Malicious code in bioql PyPI...

EUVD-2024-48174

Malicious code in bioql PyPI...

EUVD-2023-58252

Malicious code in bioql PyPI...

EUVD-2025-32014

Malicious code in bioql PyPI...

EUVD-2023-37861

Malicious code in bioql PyPI...

EUVD-2022-3969

Malicious code in bioql PyPI...

EUVD-2023-1775

Malicious code in bioql PyPI...

EUVD-2022-2882

Malicious code in bioql PyPI...

EUVD-2022-4450

Malicious code in bioql PyPI...

EUVD-2022-36309

Malicious code in bioql PyPI...

EUVD-2023-53322

Malicious code in bioql PyPI...

CVE-2025-59686

Kazaar 1.25.12 allows /api/v1/org-id/orders/order-id/documents calls with a modified order-id...

PT-2025-40252

Name of the Vulnerable Software and Affected Versions Kazaar version 1.25.12 Description The software allows calls to /api/v1/org-id/orders/order-id/documents with a modified order-id. This could potentially lead to unauthorized access or manipulation of data. Recommendations Apply any available...

CVE-2025-59686

Kazaar 1.25.12 allows /api/v1/org-id/orders/order-id/documents calls with a modified order-id...

CVE-2025-59686

Kazaar 1.25.12 allows /api/v1/org-id/orders/order-id/documents calls with a modified order-id...

CVE-2025-59686

Kazaar version 1.25.12 is vulnerable to an Insecure Direct Object Reference (IDOR) flaw (CWE-285) involving the /api/v1/org-id/orders/order-id/documents endpoint. The software fails to properly validate the order-id parameter, potentially allowing an attacker to perform unauthorized access or man...

CVE-2025-59686: Improper Authorization

Kazaar 1.25.12 allows /api/v1/org-id/orders/order-id/documents calls with a modified order-id...

The vulnerability of the get_mode_access() function in the landlock/fs.c component of the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the getmodeaccess function in the landlock/fs.c component of the Linux kernel is related to insufficient input validation. Exploiting this vulnerability could allow an attacker to trigger a service failure using a modified file...

CVE-2025-42907

SAP BI Platform allows an attacker to modify the IP address of the LogonToken for the OpenDoc. On accessing the modified link in the browser a different server could get the ping request. This has low impact on integrity with no impact on confidentiality and availability of the system...

CVE-2025-59408

The Flock Safety Bravo Edge AI Compute Device (version BRAVO_00.00_local_20241017 ) is shipped with Secure Boot disabled . This configuration allows an attacker to flash modified firmware because the device lacks necessary cryptographic protections. To mitigate this risk, it is recommended to ena...