EUVD-2022-52866

Malicious code in bioql PyPI...

EUVD-2022-38468

Malicious code in bioql PyPI...

CVE-2025-53025

The CVE-2025-53025 entry refers to Oracle VM VirtualBox (Core) with affected version 7.1.10. The vulnerability permits a high-privileges attacker who can log on to the infrastructure running VirtualBox to compromise the product, with potential impact including unauthorized access to critical data...

CVE-2025-53023

CVE-2025-53023 is a MySQL Server vulnerability in the replication component. Affected are MySQL 8.0.0–8.0.42. The issue allows a high-privileged attacker with network access via multiple protocols to cause a hang or a frequent crash (DOS) of MySQL Server. The CVSS v3.1 base score is 4.9 (Availabi...

CVE-2025-50103

...

CVE-2025-50087

...

CVE-2025-50072

...

CVE-2025-50068

CVE-2025-50068 is applicable to Oracle MySQL Cluster (Cluster: General). Affected are MySQL Cluster versions 8.0.0–8.0.42, 8.4.0–8.4.5, and 9.0.0–9.3.0. The vulnerability is described as easily exploitable with a high-privileged attacker who can log on to the infrastructure where MySQL Cluster ru...

CVE-2025-50069

...

CVE-2025-30754

CVE-2025-30754 affects Oracle Java SE and Oracle GraalVM (JSSE) with multiple affected versions across Java SE and GraalVM variants. Affected: Java SE 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; GraalVM for JDK 17.0.15, 21.0.7, 24.0.1; GraalVM Enterprise Edition 21.3.14. The vulnerabilit...

CVE-2025-6243

creationtimestamp| type| source ---|---|--- 2025-07-08 19:55:03+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114819367034333588 2025-07-09 16:15:58+00:00| seen| https://t.me/truesecator/7211 2025-07-14 06:04:37+00:00| seen|...

CVE-2025-53416

CVE-2025-53416 affects Delta Electronics DTN Soft via deserialization of untrusted data in the DTN Soft project file parsing, enabling remote code execution. The vulnerability is described as an insecure/deserialization flaw in handling project files, with an impact described as remote code execu...

CVE-2024-10534

Origin Validation Error vulnerability in Dataprom Informatics Personnel Attendance Control Systems PACS / Access Control Security Systems ACSS allows Traffic Injection. This issue affects Personnel Attendance Control Systems PACS / Access Control Security Systems ACSS: before 2024...

CVE-2023-24709

An issue found in Paradox Security Systems IPR512 allows attackers to cause a denial of service via the login.html and login.xml parameters...

CVE-2025-30735

CVE-2025-30735 affects Oracle PeopleSoft Enterprise CC Common Application Objects, component: Page and Field Configuration, version 9.2. The vulnerability exists when exposed over HTTP via a network, allowing a low-privileged attacker to perform unauthorized create, delete, or modify actions on c...

CVE-2025-30716

...

CVE-2025-30695

...

CVE-2025-30691

...

CVE-2024-12580

A vulnerability in danny-avila/librechat prior to version 0.7.6 allows for logs debug injection. The parameters sessionId, fileId, userId, and fileid in the /code/download/:sessionId/:fileId and /download/:userId/:fileid APIs are not validated or filtered, leading to potential log injection...

CVE-2024-12580 Logs Debug Injection in danny-avila/librechat

A vulnerability in danny-avila/librechat prior to version 0.7.6 allows for logs debug injection. The parameters sessionId, fileId, userId, and fileid in the /code/download/:sessionId/:fileId and /download/:userId/:fileid APIs are not validated or filtered, leading to potential log injection...