EUVD-2023-34432

Malicious code in bioql PyPI...

EUVD-2022-3459

Malicious code in bioql PyPI...

EUVD-2022-42729

Malicious code in bioql PyPI...

EUVD-2022-42902

Malicious code in bioql PyPI...

EUVD-2023-23637

Malicious code in bioql PyPI...

EUVD-2021-32614

Malicious code in bioql PyPI...

EUVD-2023-43838

Malicious code in bioql PyPI...

EUVD-2023-23937

Malicious code in bioql PyPI...

EUVD-2021-34636

Malicious code in bioql PyPI...

EUVD-2024-3197

Malicious code in bioql PyPI...

EUVD-2025-23178

Malicious code in bioql PyPI...

EUVD-2023-2470

Malicious code in bioql PyPI...

EUVD-2022-51595

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2018-19274

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Passing an absolute path to a fileexists check in phpBB before 3.2.4 allows Remote Code Execution through Object Injection by employing Phar deserialization whe...

CVE-2025-8289 Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object Injection via PHAR Deserialization

The Redirection for Contact Form 7 plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.2.4 via deserialization of untrusted input in the deleteassociatedfiles function. This makes it possible for unauthenticated attackers to inject a PHP Object. This...

CVE-2025-8289 Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object Injection via PHAR Deserialization

The Redirection for Contact Form 7 plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.2.4 via deserialization of untrusted input in the deleteassociatedfiles function. This makes it possible for unauthenticated attackers to inject a PHP Object. This...

BIT-PRESTASHOP-2025-25692

A PHAR deserialization vulnerability in the getHeaders function of PrestaShop v8.2.0 allows attackers to execute arbitrary code via a crafted POST request...

CVE-2025-25691

A PHAR deserialization vulnerability in the component /themes/import of PrestaShop v8.2.0 allows attackers to execute arbitrary code via a crafted POST request...

CVE-2025-25692

A PHAR deserialization vulnerability in the getHeaders function of PrestaShop v8.2.0 allows attackers to execute arbitrary code via a crafted POST request...

CVE-2025-25692

CVE-2025-25692 affects PrestaShop v8.2.0 with a PHAR deserialization vulnerability in the _getHeaders function. A crafted POST request can lead to arbitrary code execution. The incident is tied to the getHeaders implementation in PrestaShop’s codebase, enabling an attacker to run code on the serv...