EUVD-2022-0746

Malicious code in bioql PyPI...

EUVD-2023-30982

Malicious code in bioql PyPI...

EUVD-2023-32766

Malicious code in bioql PyPI...

EUVD-2022-40829

Malicious code in bioql PyPI...

EUVD-2025-19702

Malicious code in bioql PyPI...

CVE-2025-20315

A vulnerability in the Network-Based Application Recognition NBAR feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, causing a denial of service DoS condition. This vulnerability is due to improper handling of malformed Control...

Cisco IOS和Cisco IOS XE Software 安全漏洞

Cisco IOS and Cisco IOS XE Software are both products of Cisco, Inc.Cisco IOS is a set of operating systems developed for its network devices.Cisco IOS XE Software is a network operating system. A security vulnerability exists in Cisco IOS and Cisco IOS XE Software that stems from a stack overflo...

HyperX NGENUITY 安全漏洞

HyperX NGENUITY is a software for personalizing and controlling HyperX peripheral products from HyperX Corporation, USA. A security vulnerability exists in HyperX NGENUITY that originates from a flaw in the software that can potentially be exploited for arbitrary code execution...

CVE-2025-6078 CVE-2025-6078

Partner Software's Partner Software application and Partner Web application allows an authenticated user to add notes on the 'Notes' page when viewing a job but does not completely sanitize input, making it possible to add notes with HTML tags and JavaScript, enabling an attacker to add a note...

PT-2025-31389 · Glpi +1 · Glpi +1

Name of the Vulnerable Software and Affected Versions: GLPI versions 0.65 through 10.0.18 Description: GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. In versions 0.65 through 10.0.18, a technician can use...

CVE-2025-54529

In JetBrains TeamCity before 2025.07 a CSRF was possible in external OAuth login integration...

Cross-Domain Token Exposure

Ollama is vulnerable to Cross-Domain Token Exposure. The vulnerability is due to improper handling of the realm value in the WWW-Authenticate header by the /api/pull endpoint, which allows an attacker to steal authentication tokens and bypass access controls...

CVE-2024-58265

The snow crate before 0.9.5 for Rust, when stateful TransportState is used, allows incrementing a nonce and thereby denying message delivery...

PT-2025-29531 · Unknown · Time-Line-

Name of the Vulnerable Software and Affected Versions: TIME LINE versions prior to 1.0.5 Description: The TIME LINE website has a flaw where uploaded files instruction/message media lack strict validation for type and size. This allows a user to upload renamed or oversized files, potentially...

PT-2025-29280 · Luxion · Keyshot

Name of the Vulnerable Software and Affected Versions: Luxion KeyShot affected versions not specified Description: Luxion KeyShot contains a flaw due to an out-of-bounds write during 3DM file parsing. This issue could allow for remote code execution. Recommendations: At the moment, there is no...

CBL Mariner 2.0 Security Update: nbdkit (CVE-2025-47711)

The version of nbdkit installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-47711 advisory. - There's a flaw in the nbdkit server when handling responses from its plugins regarding the status of data...

CVE-2025-24335

Nokia Single RAN baseband software versions earlier than 24R1-SR 2.1 MP contain a SOAP message input validation flaw, which in theory could potentially be used for causing resource exhaustion in the Single RAN baseband OAM service. No practical exploit has been detected for this flaw. However, th...

CVE-2025-30979

CVE-2025-30979 affects the WordPress plugin gopiplus Pixelating image slideshow gallery (versions n/a–8.0). The root cause is improper neutralization of special elements in SQL commands, yielding an SQL Injection vulnerability. Impact is high: potential exposure of data and data integrity risk; C...

CVE-2025-38168

creationtimestamp| type| source ---|---|--- 2025-07-03 11:55:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt2obivnui2r 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2025-52717 WordPress LifterLMS plugin <= 8.0.6 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in chrisbadgett LifterLMS lifterlms allows SQL Injection.This issue affects LifterLMS: from n/a through = 8.0.6...