EUVD-2023-42472

Malicious code in bioql PyPI...

EUVD-2023-38094

Malicious code in bioql PyPI...

EUVD-2021-8640

Malicious code in bioql PyPI...

EUVD-2024-35254

Malicious code in bioql PyPI...

EUVD-2024-2965

Malicious code in bioql PyPI...

EUVD-2024-36472

Malicious code in bioql PyPI...

EUVD-2024-3424

Malicious code in bioql PyPI...

EUVD-2023-40428

Malicious code in bioql PyPI...

EUVD-2025-21388

Malicious code in bioql PyPI...

EUVD-2025-23892

Malicious code in bioql PyPI...

EUVD-2024-36065

Malicious code in bioql PyPI...

EUVD-2024-36066

Malicious code in bioql PyPI...

EUVD-2024-36076

Malicious code in bioql PyPI...

EUVD-2023-1493

Malicious code in bioql PyPI...

Introducing zeroday.cloud: First-of-its-kind cloud and AI hacking competition

Wiz and the leading CSPs are launching one of the largest hacking competitions ever to secure the open-source software powering the cloud ecosystem...

From Trace to Line: LLM Agent for Real-World OSS Vulnerability Localization

Large language models show promise for vulnerability discovery, yet prevailing methods inspect code in isolation, struggle with long contexts, and focus on coarse function- or file-level detections - offering limited actionable guidance to engineers who need precise line-level localization and...

Static Security Vulnerability Scanning of Proprietary and Open-Source Software: an Adaptable Process with Variants and Results

Software vulnerabilities remain a significant risk factor in achieving security objectives within software development organizations. This is especially true where either proprietary or open-source software OSS is included in the technological environment. In this paper an end-to-end process with...

Security Vulnerabilities in Software Supply Chain for Autonomous Vehicles

The interest in autonomous vehicles AVs for critical missions, including transportation, rescue, surveillance, reconnaissance, and mapping, is growing rapidly due to their significant safety and mobility benefits. AVs consist of complex software systems that leverage artificial intelligence AI,...

SourceCodester Student Grading System SQL注入漏洞

SourceCodester Student Grading System is a SourceCodester open source student grading system. A SQL injection vulnerability exists in SourceCodester Student Grading System version 1.0, which stems from incorrect manipulation of the parameter ID in the file /edituser.php, which could lead to a SQL...

Raspberry Pi Pico As a Radio Transmitter

In this paper we discuss several surprisingly simple methods for transforming the Raspberry Pi Pico RP2 microcontroller into a radio transmitter, by using only cheap off the shelf electronic components, and open source software. While initially this transformation may look as a harmless curiosity...