EUVD-2025-27665

Malicious code in bioql PyPI...

CVE-2025-8422

The CVE-2025-8422 affects the Propovoice: All-in-One Client Management System WordPress plugin, vulnerable in all versions up to 1.7.6.7 via the send_email() function to perform an unauthenticated Arbitrary File Read. Impact is reading server files containing sensitive information. Remediation in...

Server-Side Request Forgery (SSRF)

graphite-web is vulnerable to server-side request forgery SSRF. The sendemail function in graphite-web/webapp/graphite/composer/views.py can be used by an attacker to send a request on behalf of the Graphite web server. The corresponding response from the SSRF request is encoded into an image fil...