EUVD-2022-7087

Malicious code in bioql PyPI...

EUVD-2023-24213

Malicious code in bioql PyPI...

EUVD-2022-6740

Malicious code in bioql PyPI...

EUVD-2021-28296

Malicious code in bioql PyPI...

EUVD-2023-26621

Malicious code in bioql PyPI...

EUVD-2024-29844

Malicious code in bioql PyPI...

EUVD-2022-28589

Malicious code in bioql PyPI...

EUVD-2022-48993

Malicious code in bioql PyPI...

EUVD-2023-2155

Malicious code in bioql PyPI...

EUVD-2022-0115

Malicious code in bioql PyPI...

EUVD-2025-23197

Malicious code in bioql PyPI...

EUVD-2024-0416

Malicious code in bioql PyPI...

EUVD-2022-7391

Malicious code in bioql PyPI...

EUVD-2022-7410

Malicious code in bioql PyPI...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to improper processing of large name constraint structures in PKIXCertPathReviewer. An attacker can cause excessive resource allocation by submitting specially crafted ASN.1...

PT-2025-32220 · Unknown · Vedo Suite

Name of the Vulnerable Software and Affected Versions: Vedo Suite version 2024.17 Description: An unrestricted file upload issue exists in Vedo Suite version 2024.17. Remote authenticated attackers can write to arbitrary filesystem paths by exploiting the insecure uploadPreviews custom function i...

PT-2025-28652 · Unknown · Code-Projects Chat System

Name of the Vulnerable Software and Affected Versions: code-projects Chat System version 1.0 Description: A critical issue has been found in the code-projects Chat System, affecting some unknown functionality of the file /user/send message.php. The manipulation of the msg argument leads to SQL...

PT-2025-28153 · Langgenius · Dify

Name of the Vulnerable Software and Affected Versions: langgenius/dify versions 1.1.0 through 1.1.2 Description: The issue arises from unsanitized input in the code node, allowing execution of arbitrary code with full root permissions. This is due to the ability to override global functions in...

Improper Authorization

Overview org.graylog2:graylog2-server is a log management platform. Affected versions of this package are vulnerable to Improper Authorization via an incorrect permission check in the token creation process. An attacker can gain elevated privileges by crafting requests to the REST API and creatin...

PT-2025-27172 · Virusdie · Virusdie

Name of the Vulnerable Software and Affected Versions: Virusdie versions 1.1.3 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For Virusdie versions 1.1.3 and...