EUVD-2024-0084

Malicious code in bioql PyPI...

EUVD-2025-1613

Malicious code in bioql PyPI...

EUVD-2021-8135

Malicious code in bioql PyPI...

EUVD-2024-33666

Malicious code in bioql PyPI...

EUVD-2025-31756

Malicious code in bioql PyPI...

EUVD-2024-16440

Malicious code in bioql PyPI...

EUVD-2025-24137

Malicious code in bioql PyPI...

EUVD-2022-34894

Malicious code in bioql PyPI...

EUVD-2023-57486

Malicious code in bioql PyPI...

EUVD-2023-58800

Malicious code in bioql PyPI...

EUVD-2021-31837

Malicious code in bioql PyPI...

EUVD-2025-19166

Malicious code in bioql PyPI...

EUVD-2025-25653

Malicious code in bioql PyPI...

CVE-2025-56520

Dify v1.6.0 was discovered to contain a Server-Side Request Forgery SSRF via the component controllers.console.remotefiles.RemoteFileUploadApi. A different vulnerability than CVE-2025-29720...

CVE-2025-56520

Dify v1.6.0 was discovered to contain a Server-Side Request Forgery SSRF via the component controllers.console.remotefiles.RemoteFileUploadApi. A different vulnerability than CVE-2025-29720...

CVE-2025-56520

CVE-2025-56520 : Dify v1.6.0 contains a Server-Side Request Forgery (SSRF) in the controllers.console.remote_files.RemoteFileUploadApi due to improper validation. The Nuclei template and VulnCheck/Red Hat/NVD/CNNVD entries confirm an SSRF that allows the server to make arbitrary requests from its...

CVE-2025-56520

Dify v1.6.0 was discovered to contain a Server-Side Request Forgery SSRF via the component controllers.console.remotefiles.RemoteFileUploadApi. A different vulnerability than CVE-2025-29720...

PT-2025-40009

Name of the Vulnerable Software and Affected Versions Dify version 1.6.0 Description The software contains a Server-Side Request Forgery SSRF issue. This occurs through the component controllers.console.remote files.RemoteFileUploadApi. The issue is distinct from CVE-2025-29720. Recommendations A...

dify 安全漏洞

dify is an open source LLM application development platform from LangGenius Open Source. A security vulnerability exists in version 1.6.0 of dify, which stems from a server-side request forgery in the controllers.console.remotefiles.RemoteFileUploadApi component, which could lead to a server-side...

CVE-2025-10615 itsourcecode E-Commerce Website products.php unrestricted upload

A vulnerability was identified in itsourcecode E-Commerce Website 1.0. This impacts an unknown function of the file /admin/products.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit is publicly available and might be used...