EUVD-2025-26485

Malicious code in bioql PyPI...

EUVD-2021-3575

Malicious code in bioql PyPI...

EUVD-2025-27538

Malicious code in bioql PyPI...

EUVD-2024-45772

Malicious code in bioql PyPI...

EUVD-2022-25400

Malicious code in bioql PyPI...

EUVD-2023-24998

Malicious code in bioql PyPI...

EUVD-2023-25133

Malicious code in bioql PyPI...

EUVD-2025-5832

Malicious code in bioql PyPI...

EUVD-2022-30996

Malicious code in bioql PyPI...

EUVD-2025-25107

Malicious code in bioql PyPI...

EUVD-2023-25114

Malicious code in bioql PyPI...

EUVD-2025-26867

Malicious code in bioql PyPI...

CVE-2024-57494

Cross Site Scripting vulnerability in Neto E-Commerce CMS v.6.313.0 through v.6.3115 allows a remote attacker to escalate privileges via the kw parameter...

Advisory ROSA-SA-2025-3015

Software: dovecot 2.3.21.1 OS: ROSA-CHROME unaffected versions = dovecot-2.3.21.1-6 affected versions dovecot-2.3.21.1-6 CVE-ID: CVE-2022-30550 BDU-ID: 2022-04273 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the passdb account database of the Dovecot mail server is related to configuration...

ROS-20250929-03

A vulnerability in a perl module that provides a convenient way to describe rules for searching files and directories File-Find-Rule is related to incorrect input validation when grep is detected. directories File-Find-Rule is related to incorrect input validation when grep detects a specially...

ROS-20250923-15

Vulnerability of LDAP protocol implementation of Samba networking software package is related to flaws in access control list ACL based access delimitation. Exploitation of the vulnerability could allow an attacker acting remotely to escalate privileges...

CVE-2025-55885

SQL Injection vulnerability in Alpes Recherche et Developpement ARD GEC en Lign before v.2025-04-23 allows a remote attacker to escalate privileges via the GET parameters in index.php...

CVE-2025-55885

SQL Injection vulnerability in Alpes Recherche et Developpement ARD GEC en Lign before v.2025-04-23 allows a remote attacker to escalate privileges via the GET parameters in index.php...

Vulnerability of the Graphics component: Canvas2D in Mozilla Firefox, Firefox ESR, and the email client Thunderbird, which allows attackers to escalate their privileges.

The vulnerability of the Canvas2D component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to a data protection mechanism flaw. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

CVE-2025-34187

Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a misconfiguration in the sudoers file that allows passwordless execution of certain Bash scripts. If these scripts are writable by web-facing users or accessible via command injection, attackers can replace them with malicious payloads...