EUVD-2025-10104

Malicious code in bioql PyPI...

EUVD-2023-28448

Malicious code in bioql PyPI...

EUVD-2023-34904

Malicious code in bioql PyPI...

EUVD-2024-54873

Malicious code in bioql PyPI...

EUVD-2022-4862

Malicious code in bioql PyPI...

WAGO Device Sphere and WAGO Solution Builder have access control vulnerability issues

WAGO Device Sphere and WAGO Solution Builder are products of WAGO, a device management system, and WAGO Solution Builder, a project configuration and engineering platform. An Access Control Error vulnerability exists in WAGO Device Sphere and WAGO Solution Builder, which stems from a lack of...

WAGO Device Sphere and WAGO Solution Builder have access control vulnerability issues

WAGO Device Sphere and WAGO Solution Builder are products of WAGO, a device management system, and WAGO Solution Builder, a project configuration and engineering platform. An Access Control Error vulnerability exists in WAGO Device Sphere and WAGO Solution Builder. The vulnerability arises from...

Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2025-2097)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Scada-LTS Info Disclosure

The vulnerability of the multi-platform web solution for creating Scada systems is related to insufficient protection of operational data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

CVE-2025-58064

CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. ckeditor5 and ckeditor5-clipboard versions 46.0.0 through 46.0.2 and 44.2.0 through 45.2.1 contain a Cross-Site Scripting XSS vulnerability. Ability to exploit could be triggered by a specific user action leading to...

MAL-2025-41762 Malicious code in solution-maker (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in solution-maker (PyPI)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-38627 f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic

In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix UAF of f2fsinodeinfo in f2fsfreedic The decompressioctx may be released asynchronously after I/O completion. If this file is deleted immediately after read, and the kworker of processing postreadwq has not bee...

Open Solution QuickCMS Cross-Site Script Vulnerability

Open Solution QuickCMS is an Open Solution open source content management system. A cross-site scripting vulnerability exists in Open Solution QuickCMS version 6.8, which stems from improper neutralization of the sTitle parameter input and could lead to a stored cross-site scripting attack...

Open Solution QuickCMS Cross-Site Script Vulnerability

Open Solution QuickCMS is an Open Solution open source content management system. A cross-site scripting vulnerability exists in Open Solution QuickCMS version 6.8, which stems from improper neutralization of the sFileName parameter input and could lead to a reflective cross-site scripting attack...

ChamaleoNet: Programmable Passive Probe for Enhanced Visibility on Erroneous Traffic

Traffic visibility remains a key component for management and security operations. Observing unsolicited and erroneous traffic, such as unanswered traffic or errors, is fundamental to detect misconfiguration, temporary failures or attacks. ChamaleoNet transforms any production network into a...

CVE-2024-48892

A relative path traversal vulnerability CWE-23 in FortiSOAR 7.6.0, 7.5.0 through 7.5.1, 7.4 all versions, 7.3 all versions may allow an authenticated attacker to read arbitrary files via uploading a malicious solution pack...

CVE-2025-54715

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Dmitry V. CEO of "UKR Solution" Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders allows Path Traversal.This issue affects Barcode Scanner wi...

CVE-2025-49869: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Arraytics Eventin wp-event-solution allows Object Injection.This issue affects Eventin: from n/a through = 4.0.31...

CVE-2024-48892

A relative path traversal vulnerability CWE-23 in FortiSOAR 7.6.0, 7.5.0 through 7.5.1, 7.4 all versions, 7.3 all versions may allow an authenticated attacker to read arbitrary files via uploading a malicious solution pack...