EUVD-2022-25078

Malicious code in bioql PyPI...

EUVD-2025-3080

Malicious code in bioql PyPI...

EUVD-2023-2114

Malicious code in bioql PyPI...

EUVD-2024-36868

Malicious code in bioql PyPI...

EUVD-2024-19959

Malicious code in bioql PyPI...

EUVD-2025-18668

Malicious code in bioql PyPI...

EUVD-2024-45930

Malicious code in bioql PyPI...

EUVD-2024-19956

Malicious code in bioql PyPI...

EUVD-2023-37365

Malicious code in bioql PyPI...

EUVD-2024-1302

Malicious code in bioql PyPI...

EUVD-2025-7715

Malicious code in bioql PyPI...

EUVD-2023-44344

Malicious code in bioql PyPI...

EUVD-2024-2332

Malicious code in bioql PyPI...

EUVD-2024-2174

Malicious code in bioql PyPI...

CVE-2025-58065 Flask App Builder has an Authentication Bypass vulnerability when using non AUTH_DB methods

Flask-AppBuilder is an application development framework. Prior to version 4.8.1, when Flask-AppBuilder is configured to use OAuth, LDAP, or other non-database authentication methods, the password reset endpoint remains registered and accessible, despite not being displayed in the user interface...

PT-2025-32047 · Kenwood · Kenwood Dmx958Xr

Name of the Vulnerable Software and Affected Versions: Kenwood DMX958XR affected versions not specified Description: This issue allows attackers with physical access to execute arbitrary code on affected Kenwood DMX958XR devices. The flaw resides in the firmware update process due to insufficient...

PT-2025-32149 · Unknown · Cl4/6Nx-J Plus +1

Name of the Vulnerable Software and Affected Versions: CL4/6NX Plus versions prior to 1.15.5-r1 CL4/6NX-J Plus Japan model versions prior to 1.15.5-r1 Description: The CL4/6NX Plus and CL4/6NX-J Plus devices are susceptible to arbitrary Lua script execution. This occurs due to the ability to uplo...

PT-2025-31709 · Files · Files

Name of the Vulnerable Software and Affected Versions: Files versions 0.16.9 and below Description: Files, a module for managing files inside spaces and user profiles, lacks logic to prevent the exploitation of backend SQL queries without direct output. This could potentially allow unauthorized...

PT-2025-31591

Name of the Vulnerable Software and Affected Versions MaterialX versions prior to 1.39.3 Description MaterialX is an open standard for the exchange of rich material and look-development content across applications and renderers. When parsing shader nodes in a MTLX file, the MaterialXCore code...

Apache Struts Extras Before 2 has an Improper Output Neutralization for Logs Vulnerability

UNSUPPORTED WHEN ASSIGNED Improper Output Neutralization for Logs vulnerability in Apache Struts. This issue affects Apache Struts Extras: before 2. When using LookupDispatchAction, in some cases, Struts may print untrusted input to the logs without any filtering. Specially-crafted input may lead...