EUVD-2023-52723

Malicious code in bioql PyPI...

EUVD-2024-36022

Malicious code in bioql PyPI...

EUVD-2023-48548

Malicious code in bioql PyPI...

EUVD-2022-28699

Malicious code in bioql PyPI...

EUVD-2024-0064

Malicious code in bioql PyPI...

EUVD-2024-21275

Malicious code in bioql PyPI...

EUVD-2025-25313

Malicious code in bioql PyPI...

EUVD-2024-54844

Malicious code in bioql PyPI...

EUVD-2023-32429

Malicious code in bioql PyPI...

EUVD-2024-54958

Malicious code in bioql PyPI...

EUVD-2024-52994

Malicious code in bioql PyPI...

EUVD-2021-30064

Malicious code in bioql PyPI...

EUVD-2022-0267

Malicious code in bioql PyPI...

EUVD-2023-50899

Malicious code in bioql PyPI...

EUVD-2023-32430

Malicious code in bioql PyPI...

EUVD-2024-25952

Malicious code in bioql PyPI...

Missing Origin Validation in WebSockets

Overview Affected versions of this package are vulnerable to Missing Origin Validation in WebSockets via the operations API response, which includes secret values used for authenticating WebSocket connections. An attacker can execute arbitrary commands with the privileges of another user by...

WordPress plugin “Block For Mailchimp” code issue vulnerability

WordPress Block For Mailchimp plugin is a plugin designed for WordPress to integrate Mailchimp's email subscription feature into a website. The WordPress Block For Mailchimp plugin suffers from a server-side request forgery vulnerability that stems from the mcbSubmitFormData function not...

vet MCP Server SSE Transport DNS Rebinding Vulnerability

SafeDep vet is vulnerable to a DNS rebinding attack due to lack of HTTP Host and Origin header validation. To exploit this vulnerability following conditions must be met: 1. A vet scan is executed and reports are saved as sqlite3 database 2. A vet MCP server is running on default port with SSE...

DNS Rebinding

Overview Affected versions of this package are vulnerable to DNS Rebinding due to insufficient validation of the Host and Origin headers. An attacker can gain unauthorized access to sensitive data by luring a victim to a malicious website, enabling the attacker to read information from the report...