EUVD-2022-53290

Malicious code in bioql PyPI...

EUVD-2024-38549

Malicious code in bioql PyPI...

EUVD-2025-20304

Malicious code in bioql PyPI...

EUVD-2025-21493

Malicious code in bioql PyPI...

EUVD-2025-22059

Malicious code in bioql PyPI...

EUVD-2024-27067

Malicious code in bioql PyPI...

EUVD-2023-58326

Malicious code in bioql PyPI...

EUVD-2023-24697

Malicious code in bioql PyPI...

EUVD-2025-4589

Malicious code in bioql PyPI...

EUVD-2025-4903

Malicious code in bioql PyPI...

EUVD-2022-32155

Malicious code in bioql PyPI...

EUVD-2022-34679

Malicious code in bioql PyPI...

EUVD-2024-19640

Malicious code in bioql PyPI...

EUVD-2024-38548

Malicious code in bioql PyPI...

CVE-2025-41010 Cross-origin resource sharing (CORS) in Hiberus Sintra

Incorrect Cross-Origin Resource Sharing CORS configuration in Hiberus Sintra. Cross-Origin Resource Sharing CORS allows browsers to make cross-domain requests in a controlled manner. This request has an “Origin” header that identifies the domain making the initial request and defines the protocol...

Hiberus Sintra 安全漏洞

Hiberus Sintra is a service management platform from the Spanish company Hiberus. A security vulnerability exists in Hiberus Sintra that stems from a cross-resource sharing misconfiguration that could lead to the execution of privileged operations and access to confidential information...

CVE-2025-36262 IBM Planning Analytics Local information disclosure

IBM Planning Analytics Local 2.0.0 through 2.0.106 and 2.1.0 through 2.1.13 could allow a malicious privileged user to bypass the UI to gain unauthorized access to sensitive information due to the improper validation of input...

PT-2025-40023

Name of the Vulnerable Software and Affected Versions IBM Planning Analytics Local versions 2.0.0 through 2.0.106 IBM Planning Analytics Local versions 2.1.0 through 2.1.13 Description A malicious privileged user may be able to bypass the user interface to obtain unauthorized access to sensitive...

CVE-2025-20313

Multiple vulnerabilities in Cisco IOS XE Software of could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. These vulnerabilities are due path...

CVE-2024-21935

CVE-2024-21935 affects AMD MI300X accelerators, specifically the Satellite Management Controller (SMC). The issue arises from insufficient input validation in the SMC, which could let an attacker with privileges manipulate Redfish API commands to remove files from the local root directory, potent...