EUVD-2025-22942

Malicious code in bioql PyPI...

EUVD-2025-22946

Malicious code in bioql PyPI...

EUVD-2025-21828

Malicious code in bioql PyPI...

EUVD-2025-30461

Malicious code in bioql PyPI...

EUVD-2025-23295

Malicious code in bioql PyPI...

EUVD-2025-22586

Malicious code in bioql PyPI...

EUVD-2024-54813

Malicious code in bioql PyPI...

EUVD-2025-26573

Malicious code in bioql PyPI...

EUVD-2023-30269

Malicious code in bioql PyPI...

EUVD-2022-31201

Malicious code in bioql PyPI...

EUVD-2022-43905

Malicious code in bioql PyPI...

EUVD-2022-39475

Malicious code in bioql PyPI...

EUVD-2022-37406

Malicious code in bioql PyPI...

EUVD-2022-27490

Malicious code in bioql PyPI...

UBUNTU-CVE-2025-54289

Privilege Escalation in operations API in Canonical LXD 6.5 on multiple platforms allows attacker with read permissions to hijack terminal or console sessions and execute arbitrary commands via WebSocket connection hijacking format...

GE S2020/S2020G Fast Switch 61850 Improper Neutralization of Input During Web Page Generation (CVE-2019-18267)

An issue was found in GE S2020/S2020G Fast Switch 61850, S2020/S2020G Fast Switch 61850 Versions 07A03 and prior. An attacker can inject arbitrary Javascript in a specially crafted HTTP request that may be reflected back in the HTTP response. The device is also vulnerable to a stored cross-site...

CVE-2025-54289: Missing Origin Validation in WebSockets

Privilege Escalation in operations API in Canonical LXD 6.5 on multiple platforms allows attacker with read permissions to hijack terminal or console sessions and execute arbitrary commands via WebSocket connection hijacking format...

CVE-2025-54592

FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below do not properly terminate the session during logout. After a user logs out, the session cookie remains active and unchanged. The unchanged cookie could be reused by an attacker if a new session were to be started. This...

CVE-2025-54592 FreshRSS has Incomplete Session Termination on Logout

FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below do not properly terminate the session during logout. After a user logs out, the session cookie remains active and unchanged. The unchanged cookie could be reused by an attacker if a new session were to be started. This...

CVE-2025-54592 FreshRSS has Incomplete Session Termination on Logout

FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below do not properly terminate the session during logout. After a user logs out, the session cookie remains active and unchanged. The unchanged cookie could be reused by an attacker if a new session were to be started. This...