CVE-2025-11287: Improper Authentication

A vulnerability was identified in samanhappy MCPHub up to 0.9.10. This vulnerability affects the function handleSseConnectionfunction of the file src/services/sseService.ts. Such manipulation leads to improper authentication. The attack may be launched remotely. The exploit is publicly available...

EUVD-2025-21379

Malicious code in bioql PyPI...

EUVD-2023-50565

Malicious code in bioql PyPI...

EUVD-2021-33182

Malicious code in bioql PyPI...

EUVD-2021-33185

Malicious code in bioql PyPI...

EUVD-2021-33196

Malicious code in bioql PyPI...

EUVD-2021-33200

Malicious code in bioql PyPI...

EUVD-2021-33154

Malicious code in bioql PyPI...

EUVD-2021-33159

Malicious code in bioql PyPI...

EUVD-2021-33202

Malicious code in bioql PyPI...

EUVD-2021-33222

Malicious code in bioql PyPI...

EUVD-2022-37900

Malicious code in bioql PyPI...

EUVD-2022-51747

Malicious code in bioql PyPI...

EUVD-2023-33112

Malicious code in bioql PyPI...

EUVD-2021-33183

Malicious code in bioql PyPI...

EUVD-2021-33011

Malicious code in bioql PyPI...

EUVD-2021-30597

Malicious code in bioql PyPI...

CVE-2025-11011: NULL Pointer Dereference

A vulnerability was found in BehaviorTree up to 4.7.0. Affected by this issue is the function JsonExporter::fromJson of the file /src/jsonexport.cpp. Performing manipulation of the argument Source results in null pointer dereference. The attack needs to be approached locally. The exploit has been...

CVE-2025-11013: NULL Pointer Dereference

A vulnerability was identified in BehaviorTree up to 4.7.0. This vulnerability affects the function XMLParser::PImpl::loadDocImpl of the file /src/xmlparsing.cpp of the component XML Parser. The manipulation leads to null pointer dereference. The attack can only be performed from a local...

CVE-2025-11031: Improper Limitation of a Pathname to a Restricted Directory

A flaw has been found in DataTables up to 1.10.13. The affected element is an unknown function of the file /examples/resources/examples.php. This manipulation of the argument src causes path traversal. It is possible to initiate the attack remotely. The exploit has been published and may be used...