EUVD-2024-45763

Malicious code in bioql PyPI...

EUVD-2025-26414

Malicious code in bioql PyPI...

EUVD-2025-7219

Malicious code in bioql PyPI...

EUVD-2022-2456

Malicious code in bioql PyPI...

EUVD-2024-27372

Malicious code in bioql PyPI...

EUVD-2025-12406

Malicious code in bioql PyPI...

EUVD-2023-41085

Malicious code in bioql PyPI...

EUVD-2022-0501

Malicious code in bioql PyPI...

CVE-2025-10547: Undefined Security Weakness

An uninitialized variable in the HTTP CGI request arguments processing component of Vigor Routers running DrayOS may allow an attacker the ability to perform RCE on the appliance through memory corruption...

CVE-2025-59403: Exposed Dangerous Method or Function

The Flock Safety Android Collins application aka com.flocksafety.android.collins 6.35.31 for Android lacks authentication. It is responsible for the camera feed on Falcon, Sparrow, and Bravo devices, but exposes administrative API endpoints on port 8080 without authentication. Endpoints include b...

CVE-2025-61622

The Apache Pyfory (and legacy PyFury ) framework is vulnerable to Remote Code Execution (RCE) due to unsafe deserialization of untrusted data. Specifically, an attacker can craft a data stream that triggers a pickle-fallback serializer , leading to the execution of pickle.loads. This affects Pyfo...

Exploit for CVE-2025-6384

CrafterCMS Groovy RCE -...

CVE-2025-55848: Improper Neutralization of Special Elements used in a Command

An issue was discovered in DIR-823 firmware 20250416. There is an RCE vulnerability in the setcassword settings interface, as the httpcasswd parameter is not filtered by '&'to allow injection of reverse connection commands...

CVE-2025-5717: Improper Control of Generation of Code

An authenticated remote code execution RCE vulnerability exists in multiple WSO2 products due to improper input validation in the event processor admin service. A user with administrative access to the SOAP admin services can exploit this flaw by deploying a Siddhi execution plan containing...

CVE-2025-34206: Incorrect Permission Assignment for Critical Resource

Vasion Print formerly PrinterLogic Virtual Appliance Host and Application VA and SaaS deployments mount host configuration and secret material under /var/www/efsstorage into many Docker containers with overly-permissive filesystem permissions. Files such as secrets.env, GPG-encrypted blobs in...

CVE-2025-10492: Deserialization of Untrusted Data

A Java deserialisation vulnerability has been discovered in Jaspersoft Library. Improper handling of externally supplied data may allow attackers to execute arbitrary code remotely on systems that use the affected library...

Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to kafka-clients-3.9.0.jar CVE-2025-27818, CVE-2025-27817

Summary IBM Maximo Application Suite - Monitor Component is vulnerable to kafka-clients-3.9.0.jar CVE-2025-27818, CVE-2025-27817. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2025-27818 DESCRIPTION: A possible security vulnerability ha...

Exploit for CVE-2021-22006

It is an exploit module/toolkit targeting JNDI vulnerabilities. The primary CVE ID is CVE-2021-22006. The target product/service is Java-based applications, specifically those using JNDI services. The vulnerability class/vector is RCE Remote Code Execution, and the probable entry points are...

rapidscan

This is a Python-based web vulnerability scanner called RapidScan. It is designed to automate the process of security scanning by using a multitude of available Linux security tools and some custom scripts. The tool is still under development and currently supports around 80 vulnerability tests...

CVE-2025-58180

CVE-2025-58180 affects OctoPrint ≤ 1.11.2. An authenticated attacker able to upload files can craft a filename that, when interpolated into a system event handler command, leads to arbitrary command execution on the host via a FileAdded event. The vulnerability relies on insufficient sanitization...