EUVD-2022-44914

Malicious code in bioql PyPI...

EUVD-2022-35200

Malicious code in bioql PyPI...

EUVD-2025-14177

Malicious code in bioql PyPI...

EUVD-2023-0131

Malicious code in bioql PyPI...

EUVD-2024-22408

Malicious code in bioql PyPI...

EUVD-2024-35542

Malicious code in bioql PyPI...

EUVD-2024-23547

Malicious code in bioql PyPI...

EUVD-2022-49101

Malicious code in bioql PyPI...

EUVD-2022-36210

Malicious code in bioql PyPI...

EUVD-2022-34235

Malicious code in bioql PyPI...

EUVD-2023-54713

Malicious code in bioql PyPI...

EUVD-2021-9377

Malicious code in bioql PyPI...

CVE-2025-61692

VT STUDIO versions 8.53 and prior contain a use after free vulnerability. If the product uses a specially crafted file, arbitrary code may be executed on the affected product...

Keras 安全漏洞

Keras is a multi-backend deep learning framework open-sourced by Keras. A security vulnerability exists in Keras that stems from a specially crafted .keras model archive that could trigger arbitrary code execution...

PT-2025-38505

Name of the Vulnerable Software and Affected Versions Supermicro BMC firmware versions affected versions not specified Description An issue exists in the Supermicro BMC firmware validation logic on Supermicro MBD-X12STW. An attacker can update the system firmware with a specially crafted image...

CVE-2025-53853

A heap-based buffer overflow vulnerability exists in the ISHNE parsing functionality of The Biosig Project libbiosig 3.9.0 and Master Branch 35a819fa. A specially crafted ISHNE ECG annotations file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this...

CVE-2025-46411

Affects The Biosig Project libbiosig 3.9.0 and Master Branch (35a819fa); vulnerability type is a stack-based buffer overflow in the MFER parsing functionality. A specially crafted MFER file can lead to arbitrary code execution. An attacker can supply a malicious file to trigger the vulnerability....

CVE-2025-5514

Improper Handling of Length Parameter Inconsistency vulnerability in web server function on Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to delay the processing of the web server function and prevent legitimate users from utilizing the web...

CVE-2025-54924

CWE-918: Server-Side Request Forgery SSRF vulnerability exists that could cause unauthorized access to sensitive data when an attacker sends a specially crafted document to a vulnerable endpoint...

CVE-2025-54924

The CVE-2025-54924 entry concerns Schneider Electric EcoStruxure Power Monitoring Expert. A SSRF flaw in the GetPagesAsImages function allows remote attackers to disclose sensitive information. Unauthenticated exploitation is implied by ZDI notes; No published patch/version is specified in the pr...