EUVD-2025-33165

An XML External Entity XXE vulnerability in the /mall/wxpay/pay component of uzy-ssm-mall v1.1.0 allows attackers to execute arbitrary code via supplying crafted XML data...

PT-2025-41266

Name of the Vulnerable Software and Affected Versions uzy-ssm-mall version 1.1.0 Description The /mall/wxpay/pay component contains a flaw that allows attackers to execute arbitrary code by providing specially crafted XML data. This is due to an XML External Entity XXE issue. Recommendations At t...

CVE-2025-60833

CVE-2025-60833 (uzy-ssm-mall v1.1.0) : An XML External Entity (XXE) flaw in the /mall/wxpay/pay component allows an attacker to execute arbitrary code by supplying crafted XML data. Root cause: XXE in the XML parsing path. Affected software is uzy-ssm-mall v1.1.0; document does not provide a fixe...

EUVD-2010-0597

Malware in sbrugna...

EUVD-2023-30704

Malicious code in bioql PyPI...

EUVD-2022-33863

Malicious code in bioql PyPI...

EUVD-2022-43360

Malicious code in bioql PyPI...

EUVD-2025-15427

Malicious code in bioql PyPI...

EUVD-2025-15043

Malicious code in bioql PyPI...

EUVD-2025-10873

Malicious code in bioql PyPI...

EUVD-2022-43358

Malicious code in bioql PyPI...

EUVD-2022-43359

Malicious code in bioql PyPI...

EUVD-2025-10874

Malicious code in bioql PyPI...

EUVD-2022-43361

Malicious code in bioql PyPI...

EUVD-2025-14330

Malicious code in bioql PyPI...

Amazon Linux 2 : amazon-ssm-agent, --advisory ALAS2-2025-3010 (ALAS-2025-3010)

The version of amazon-ssm-agent installed on the remote host is prior to 3.3.3050.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-3010 advisory. The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line...

Important: amazon-ssm-agent

Issue Overview: The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunction with a server or proxy which incorrectly interprets a bare LF in a chunk extension as part of the extension, this could permi...

Important: amazon-ssm-agent

Issue Overview: The net/http package accepted data in the chunked transfer encoding containing an invalid chunk-size line terminated by a bare LF. When used in conjunction with a server or proxy which incorrectly interprets a bare LF in a chunk extension as part of the extension, this could permi...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: wavefront-collector-for-kubernetes, kots, kubernetes-csi-external-snapshotter-fips, harbor-fips, flux-image-automation-controller, dive, eks-distro, neuvector, podman, karpenter-fips, swagger, glab, nvidia-container-toolkit, step-fips, aws-iam-authenticator,...

CVE-2016-15046

A client-side remote code execution vulnerability exists in Hanwha Techwin Smart Security Manager SSM versions 1.32 and 1.4, due to improper restrictions on the PUT method exposed by the bundled Apache ActiveMQ instance running on port 8161. An attacker can exploit this flaw through a Cross-Origi...