EUVD-2022-3156

Malicious code in bioql PyPI...

EUVD-2022-4603

Malicious code in bioql PyPI...

EUVD-2023-47777

Malicious code in bioql PyPI...

EUVD-2025-11126

Malicious code in bioql PyPI...

EUVD-2025-26837

Malicious code in bioql PyPI...

EUVD-2025-24535

Malicious code in bioql PyPI...

EUVD-2024-54954

Malicious code in bioql PyPI...

EUVD-2021-6502

Malicious code in bioql PyPI...

EUVD-2025-27362

Malicious code in bioql PyPI...

EUVD-2024-52104

Malicious code in bioql PyPI...

EUVD-2024-52573

Malicious code in bioql PyPI...

Malicious code in @nativescript-community/ui-document-picker (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 46d11dbb6f2ddb5b46be5e63a827af98e3f887baac9c3df11be485d8326089b2 This package was compromised by the Shai-Hulud NPM worm. The malicious payload steal...

CVE-2025-54111

Use after free in Windows UI XAML Phone DatePickerFlyout allows an authorized attacker to elevate privileges locally...

CVE-2025-54111

Use after free in Windows UI XAML Phone DatePickerFlyout allows an authorized attacker to elevate privileges locally...

CVE-2025-54111

CVE-2025-54111 is documented in the connected materials with concrete details: it involves a use-after-free in Windows UI XAML Phone DatePickerFlyout that can allow an attacker to elevate privileges locally. The NCSC-2025-0277 listing assigns a high severity (CVSS ~7.8–7.8 range) to CVE-2025-5411...

CVE-2025-54111 Windows UI XAML Phone DatePickerFlyout Elevation of Privilege Vulnerability

...

Google Android elevation of privilege vulnerability (CNVD-2025-30723)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to unauthorized data access caused by SQL injection in multiple functions in PickerDbFacade.java. An attacker can exploit the vulnerability to elevate...

CVE-2024-49722

In showAvatarPicker of EditUserPhotoController.java, there is a possible cross user image leak due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-32327

CVE-2025-32327 affects Google Android via SQL injection in multiple functions of PickerDbFacade.java, enabling unauthorized data access and local elevation of privilege with no user interaction. Impact and exploit details are stated in multiple sources (NVD, Red Hat, CNVD, OSV). Root cause is an ...

Linux Distros Unpatched Vulnerability : CVE-2013-1833

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple cross-site scripting XSS vulnerabilities in the File Picker module in Moodle 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x befo...