EUVD-2023-29048

Malicious code in bioql PyPI...

EUVD-2023-44932

Malicious code in bioql PyPI...

EUVD-2024-22933

Malicious code in bioql PyPI...

EUVD-2023-26476

Malicious code in bioql PyPI...

EUVD-2022-39494

Malicious code in bioql PyPI...

EUVD-2022-26465

Malicious code in bioql PyPI...

EUVD-2023-36722

Malicious code in bioql PyPI...

EUVD-2022-41283

Malicious code in bioql PyPI...

EUVD-2025-6692

Malicious code in bioql PyPI...

EUVD-2023-0700

Malicious code in bioql PyPI...

EUVD-2022-24764

Malicious code in bioql PyPI...

EUVD-2021-9211

Malicious code in bioql PyPI...

EUVD-2023-29673

Malicious code in bioql PyPI...

EUVD-2023-50418

Malicious code in bioql PyPI...

EUVD-2023-32654

Malicious code in bioql PyPI...

EUVD-2023-26907

Malicious code in bioql PyPI...

CVE-2025-61599 Emlog is Vulnerable to Stored Cross-Site Scripting (XSS) in "Twitter" Feature via Markdown Input

Emlog is an open source website building system. A stored Cross-Site Scripting XSS vulnerability exists in the "Twitter"feature of EMLOG Pro 2.5.21 and below. An authenticated user with privileges to post a "Twitter" message can inject arbitrary JavaScript code. The malicious script is stored on...

CVE-2025-20368

In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a low privileged user that does not hold the admin or power Splunk roles could craft a malicious payload through the error messages and job inspection...

A NULL pointer dereference flaw was found in the megasas-gen2 SCSI host bus adapter emulation of QEMU in versions before and including 6.0. This issue occurs in the megasas_command_cancelled() callback function while dropping a SCSI request. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

...

CVE-2025-20371

In Splunk Enterprise versions below 10.0.1, 9.4.4, 9.3.6 and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.109, 9.3.2408.119 and 9.2.2406.122, an unauthenticated attacker could trigger a blind server-side request forgery SSRF potentially letting an attacker perform REST API calls on...