EUVD-2022-3745

Malicious code in bioql PyPI...

EUVD-2022-3546

Malicious code in bioql PyPI...

EUVD-2022-6687

Malicious code in bioql PyPI...

EUVD-2022-0766

Malicious code in bioql PyPI...

EUVD-2022-7681

Malicious code in bioql PyPI...

EUVD-2025-27447

Malicious code in bioql PyPI...

EUVD-2023-2429

Malicious code in bioql PyPI...

EUVD-2022-6153

Malicious code in bioql PyPI...

EUVD-2022-55413

Malicious code in bioql PyPI...

EUVD-2022-4182

Malicious code in bioql PyPI...

EUVD-2022-5461

Malicious code in bioql PyPI...

EUVD-2022-6165

Malicious code in bioql PyPI...

EUVD-2022-7183

Malicious code in bioql PyPI...

EUVD-2022-3266

Malicious code in bioql PyPI...

PT-2025-39582

Name of the Vulnerable Software and Affected Versions Joovii Sendle Shipping versions through 6.02 Description A Cross-Site Request Forgery CSRF issue exists in Joovii Sendle Shipping. This allows attackers to perform actions on behalf of unsuspecting users. The issue allows Cross Site Request...

CVE-2025-34186

Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a vulnerability in its authentication mechanism. Unsanitized input is passed to a system call for authentication, allowing attackers to inject special characters and manipulate command parsing. Because the binary interprets non-zero exit...

CVE

It is an offensive tool for web applications. The repository app...

CVE-2025-43784

CVE-2025-43784 affects Liferay Portal (7.4.0–7.4.3.124) and Liferay DXP (2024.Q2.0–2024.Q2.8, 2024.Q1.1–2024.Q1.12, and 7.4 GA through update 92). Root cause: improper access control allowing guest users to view object entries via API Builder. Impact: exposure of object entries information (confi...

PT-2025-36440

Name of the Vulnerable Software and Affected Versions: Apache Jackrabbit Core versions 1.0.0 through 2.22.1 Apache Jackrabbit JCR Commons versions 1.0.0 through 2.22.1 Description: This issue involves the deserialization of untrusted data in Apache Jackrabbit Core and Apache Jackrabbit JCR Common...

CVE-2025-58460

The CVE concerns the Jenkins OpenTelemetry Plugin (versions up to 3.1543.v8446b_92b_cd64) with a missing permission check. This allows attackers who have Overall/Read to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, enabling capture...