4432 matches found
EUVD-2023-26556
Malicious code in bioql PyPI...
EUVD-2025-3673
Malicious code in bioql PyPI...
EUVD-2022-55422
Malicious code in bioql PyPI...
EUVD-2022-1719
Malicious code in bioql PyPI...
EUVD-2022-55372
Malicious code in bioql PyPI...
EUVD-2023-35163
Malicious code in bioql PyPI...
EUVD-2022-3617
Malicious code in bioql PyPI...
EUVD-2023-43148
Malicious code in bioql PyPI...
EUVD-2022-5578
Malicious code in bioql PyPI...
EUVD-2022-33975
Malicious code in bioql PyPI...
EUVD-2023-43230
Malicious code in bioql PyPI...
EUVD-2025-27913
Malicious code in bioql PyPI...
CVE-2025-52042
In Frappe ERPNext 15.57.5, the function getrfqcontainingsupplier at erpnext/buying/doctype/requestforquotation/requestforquotation.py is vulnerable to SQL Injection, which allows an attacker to extract all information from databases by injecting SQL query via the txt parameter...
Malicious code in vite-next-logger (npm)
The package vite-next-logger was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b63f6a228b94e3b3c06e0d3e65937daa9e46eb2a5f95296fc24823796fab6fb3 Any computer that has this package installed or running should be considered fully...
Malware in vite-next-logger
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2025-47836 Malicious code in vite-next-logger (npm)
The package vite-next-logger was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b63f6a228b94e3b3c06e0d3e65937daa9e46eb2a5f95296fc24823796fab6fb3 Any computer that has this package installed or running should be considered fully...
Server-Side Request Forgery (SSRF)
Next.js is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to the improper use of the next function without explicitly passing the request object, which allows an attacker to exploit incorrectly forwarded user-supplied headers in self-hosted applications...
Malicious code in next-optimized-image (npm)
The package next-optimized-image was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58dd13a9edd9b09b53a4bd0b8b6e36204d366ffc8f6e6a1b9ed3fcfc89ef9657 Any computer that has this package installed or running should be considered fully...
Malware in next-optimized-image
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2025-47563 Malicious code in next-optimized-image (npm)
The package next-optimized-image was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58dd13a9edd9b09b53a4bd0b8b6e36204d366ffc8f6e6a1b9ed3fcfc89ef9657 Any computer that has this package installed or running should be considered fully...