EUVD-2024-50711

Malicious code in bioql PyPI...

EUVD-2024-0268

Malicious code in bioql PyPI...

EUVD-2024-41372

Malicious code in bioql PyPI...

EUVD-2024-0750

Malicious code in bioql PyPI...

EUVD-2024-0628

Malicious code in bioql PyPI...

EUVD-2025-19934

Malicious code in bioql PyPI...

EUVD-2025-18073

Malicious code in bioql PyPI...

EUVD-2022-50667

Malicious code in bioql PyPI...

EUVD-2024-53128

Malicious code in bioql PyPI...

EUVD-2021-8147

Malicious code in bioql PyPI...

EUVD-2024-40868

Malicious code in bioql PyPI...

EUVD-2025-25228

Malicious code in bioql PyPI...

EUVD-2022-25465

Malicious code in bioql PyPI...

EUVD-2025-26966

Malicious code in bioql PyPI...

EUVD-2021-8246

Malicious code in bioql PyPI...

EUVD-2025-22507

Malicious code in bioql PyPI...

EUVD-2025-32374

Eidos is an extensible framework for Personal Data Management. Versions 0.21.0 and below contain a one-click remote code execution vulnerability. An attacker can exploit this vulnerability by embedding a specially crafted eidos: URL on any website, including a malicious one they control. When a...

CVE-2025-54374 Eidos: One-click Remote Code Execution through Custom URL Handling

Eidos is an extensible framework for Personal Data Management. Versions 0.21.0 and below contain a one-click remote code execution vulnerability. An attacker can exploit this vulnerability by embedding a specially crafted eidos: URL on any website, including a malicious one they control. When a...

CVE-2025-54374 Eidos: One-click Remote Code Execution through Custom URL Handling

Eidos is an extensible framework for Personal Data Management. Versions 0.21.0 and below contain a one-click remote code execution vulnerability. An attacker can exploit this vulnerability by embedding a specially crafted eidos: URL on any website, including a malicious one they control. When a...

A flaw was found in the xdg-email component of xdg-utils-1.1.0-rc1 and newer. When handling mailto: URIs, xdg-email allows attachments to be discreetly added via the URI when being passed to Thunderbird. An attacker could potentially send a victim a URI that automatically attaches a sensitive file to a new email. If a victim user does not notice that an attachment was added and sends the email, this could result in sensitive information disclosure. It has been confirmed that the code behind this issue is in xdg-email and not in Thunderbird.

...