1111 matches found
EUVD-2024-45934
Malicious code in bioql PyPI...
EUVD-2022-38827
Malicious code in bioql PyPI...
EUVD-2025-28130
Malicious code in bioql PyPI...
EUVD-2025-6208
Malicious code in bioql PyPI...
EUVD-2023-27707
Malicious code in bioql PyPI...
EUVD-2022-42937
Malicious code in bioql PyPI...
EUVD-2023-29712
Malicious code in bioql PyPI...
EUVD-2025-16485
Malicious code in bioql PyPI...
EUVD-2024-29841
Malicious code in bioql PyPI...
EUVD-2025-21563
Malicious code in bioql PyPI...
EUVD-2025-29069
Malicious code in bioql PyPI...
EUVD-2025-26245
Malicious code in bioql PyPI...
EUVD-2025-16450
Malicious code in bioql PyPI...
EUVD-2025-27088
Malicious code in bioql PyPI...
EUVD-2024-2337
Malicious code in bioql PyPI...
EUVD-2025-24446
Malicious code in bioql PyPI...
Server-Side Request Forgery (SSRF)
Next.js is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to the improper use of the next function without explicitly passing the request object, which allows an attacker to exploit incorrectly forwarded user-supplied headers in self-hosted applications...
PT-2025-39920
Name of the Vulnerable Software and Affected Versions FreshRSS versions 1.26.3 and below Description FreshRSS is susceptible to a double clickjacking protection bypass. An attacker can trick an administrator into promoting themselves to "admin" and logging into other users' accounts. This is...
FreshRSS 代码问题漏洞
FreshRSS is a free, self-hosted RSS aggregator from FreshRSS Open Source. A code issue vulnerability exists in FreshRSS 1.26.3 and prior versions that stems from a failure to properly terminate a session when logging out, which could lead to session hijacking and fixed vulnerabilities...
CVE-2025-59344
AliasVault is a privacy-first password manager with built-in email aliasing. A server-side request forgery SSRF vulnerability exists in the favicon extraction feature of AliasVault API versions 0.23.0 and lower. The extractor fetches a user-supplied URL, parses the returned HTML, and follows...