EUVD-2024-49583

Malicious code in bioql PyPI...

EUVD-2025-18495

Malicious code in bioql PyPI...

EUVD-2024-29756

Malicious code in bioql PyPI...

EUVD-2025-11001

Malicious code in bioql PyPI...

EUVD-2024-27675

Malicious code in bioql PyPI...

EUVD-2025-4667

Malicious code in bioql PyPI...

EUVD-2025-1485

Malicious code in bioql PyPI...

EUVD-2025-25326

Malicious code in bioql PyPI...

EUVD-2023-31770

Malicious code in bioql PyPI...

EUVD-2021-31855

Malicious code in bioql PyPI...

EUVD-2023-12952

Malicious code in bioql PyPI...

EUVD-2022-2217

Malicious code in bioql PyPI...

EUVD-2023-52326

Malicious code in bioql PyPI...

EUVD-2022-40992

Malicious code in bioql PyPI...

QNAP QTS 格式化字符串错误漏洞

QNAP QTS is a NAS operating system developed by QNAPSystems, Inc. designed for network attached storage devices, providing data management, backup, multimedia entertainment, etc. QNAP QuTS hero is an enterprise-grade operating system developed by QNAP for its networked storage devices NAS, which ...

TRUFusion Entreprise Sensitive Data Exposure

TRUFusion Entreprise is a solution to easily and securely manage the exchange of CAD files and related product design data from within your PLM system. Due to a lack of control, it is possible for an unauthenticated attacker to access an endpoint that returns all partners who have access to the...

PT-2025-40601

Name of the Vulnerable Software and Affected Versions Liferay Portal versions 7.4.0 through 7.4.3.132 Liferay DXP versions 2025.Q1.0 through 2025.Q1.4 Liferay DXP versions 2024.Q4.0 through 2024.Q4.5 Liferay DXP versions 2024.Q3.0 through 2024.Q3.13 Liferay DXP versions 2024.Q2.1 through 2024.Q2....

CVE-2025-34210 Vasion Print (formerly PrinterLogic) Readable Cleartext Passwords

Vasion Print formerly PrinterLogic Virtual Appliance Host and Application VA/SaaS deployments store a large number of sensitive credentials database passwords, MySQL root password, SaaS keys, Portainer admin password, etc. in cleartext files that are world-readable. Any local user - or any proces...

CVE-2025-54468 Rancher sends sensitive information to external services through the `/meta/proxy` endpoint

A vulnerability has been identified within Rancher Manager whereby Impersonate-Extra- headers are being sent to an external entity, for example amazonaws.com, via the /meta/proxy Rancher endpoint. These headers may contain identifiable and/or sensitive information e.g. email addresses...

CVE-2025-40646

CVE-2025-40646 describes a Stored Cross-Site Scripting (XSS) in Energy CRM v2025 by Status Tracker Ltd. The vulnerability arises from insufficient validation of user input in a POST to /crm/create_job_submit.php, using the JobCreatedBy parameter. An attacker could craft a request that, when viewe...