EUVD-2025-18905

Malicious code in bioql PyPI...

EUVD-2022-29650

Malicious code in bioql PyPI...

EUVD-2022-6842

Malicious code in bioql PyPI...

EUVD-2023-1901

Malicious code in bioql PyPI...

EUVD-2024-0123

Malicious code in bioql PyPI...

EUVD-2023-2803

Malicious code in bioql PyPI...

EUVD-2024-0201

Malicious code in bioql PyPI...

EUVD-2023-2184

Malicious code in bioql PyPI...

EUVD-2024-24343

Malicious code in bioql PyPI...

EUVD-2024-35887

Malicious code in bioql PyPI...

EUVD-2023-2089

Malicious code in bioql PyPI...

EUVD-2025-16487

Malicious code in bioql PyPI...

EUVD-2025-11867

Malicious code in bioql PyPI...

EUVD-2022-7228

Malicious code in bioql PyPI...

WordPress LatePoint plugin <= 5.1.94 - Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability

Authenticated Administrator+ Stored Cross-Site Scripting vulnerability discovered by WordFence in WordPress Plugin LatePoint versions = 5.1.94...

DEBIAN-CVE-2025-59842

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to version 4.4.8, links generated with LaTeX typesetters in Markdown files and Markdown cells in JupyterLab and Jupyter Notebook did not include the noopener...

UBUNTU-CVE-2025-59830

Rack is a modular Ruby web server interface. Prior to version 2.2.18, Rack::QueryParser enforces its paramslimit only for parameters separated by &, while still splitting on both & and ;. As a result, attackers could use ; separators to bypass the parameter count limit and submit more parameters...

CVE-2025-59831 `git-comiters` Command Injection vulnerability

git-commiters is a Node.js function module providing committers stats for their git repository. Prior to version 0.1.2, there is a command injection vulnerability in git-commiters. This vulnerability manifests with the library's primary exported API: gitCommitersoptions, callback which allows...

Linux Distros Unpatched Vulnerability : CVE-2025-59420

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.4, Authlib's JWS verification accepts tokens that declare unknow...

CVE-2025-59535

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. Prior to version 10.1.0, arbitrary themes can be loaded through query parameters. If an installed theme had a vulnerability, even if it was not used on any page, this could be loaded on...