EUVD-2022-2271

Malicious code in bioql PyPI...

EUVD-2022-34699

Malicious code in bioql PyPI...

EUVD-2023-24437

Malicious code in bioql PyPI...

EUVD-2024-54589

Malicious code in bioql PyPI...

EUVD-2025-19137

Malicious code in bioql PyPI...

EUVD-2022-29297

Malicious code in bioql PyPI...

EUVD-2022-6218

Malicious code in bioql PyPI...

EUVD-2022-49282

Malicious code in bioql PyPI...

EUVD-2022-5742

Malicious code in bioql PyPI...

EUVD-2022-3808

Malicious code in bioql PyPI...

EUVD-2023-2544

Malicious code in bioql PyPI...

EUVD-2022-3746

Malicious code in bioql PyPI...

EUVD-2025-25694

Malicious code in bioql PyPI...

EUVD-2023-47937

Malicious code in bioql PyPI...

DataChain 代码问题漏洞

DataChain is a version control software from Iterative open source. A code issue vulnerability exists in DataChain 0.34.1 and prior versions, which stems from failure to validate data when reading serialized objects from environment variables, which could lead to code execution...

PT-2025-40450

Name of the Vulnerable Software and Affected Versions DataChain versions 0.34.1 and below Description DataChain is a Python-based AI-data warehouse for transforming and analyzing unstructured data. The library reads serialized objects from environment variables, specifically DATACHAIN METASTORE a...

Exploit for CVE-2025-49113

CVE-2025-49113 - Roundcube Webmail Remote Code Execution Vulne...

Denial Of Service (DoS)

vrana/adminer is vulnerable to Denial of Service. The vulnerability is due to improper handling of crafted serialized payloads in Monolog logging, which allows an attacker to trigger excessive memory consumption via malicious serialized objects, leading to PHP Object Injection and server-level Do...

shiro-exploit

This is a Python script for exploiting a vulnerability in Apache Shiro, a Java-based security framework. The script is designed to bypass authentication and authorization checks in Shiro, allowing an attacker to gain unauthorized access to sensitive data. The script uses the Crypto.Cipher module ...

CVE-2025-10221

Insertion of Sensitive Information into Log File CWE-532 in the ARP Agent component in AxxonSoft Axxon One / AxxonNet / C-WerkNet 2.0.4 and earlier on Windows platforms allows a local attacker to obtain plaintext credentials via reading TRACE log files containing serialized JSON with passwords...