Inclusion of Web Functionality from an Untrusted Source

Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Inclusion of Web Functionality from an Untrusted Source via the execute event handler used by the Direct Connections feature. An attacker can gain access to authentication tokens, take over user accounts, and...

EUVD-2017-17794

Malware in sbrugna...

EUVD-2019-1169

Malware in sbrugna...

EUVD-2021-0034

Malware in sbrugna...

EUVD-2017-2730

Malware in sbrugna...

EUVD-2020-19515

Malware in sbrugna...

EUVD-2020-27352

Malware in sbrugna...

EUVD-2023-29591

Malicious code in bioql PyPI...

EUVD-2022-24950

Malicious code in bioql PyPI...

EUVD-2023-1445

Malicious code in bioql PyPI...

EUVD-2025-12285

Malicious code in bioql PyPI...

EUVD-2022-0882

Malicious code in bioql PyPI...

EUVD-2025-25128

Malicious code in bioql PyPI...

EUVD-2024-2364

Malicious code in bioql PyPI...

EUVD-2025-25129

Malicious code in bioql PyPI...

EUVD-2024-39579

Malicious code in bioql PyPI...

EUVD-2022-32671

Malicious code in bioql PyPI...

EUVD-2022-52840

Malicious code in bioql PyPI...

Zip Slip

Overview monai is an AI Toolkit for Healthcare Imaging Affected versions of this package are vulnerable to Zip Slip via the use of zipfile.extractalloutputdir. An attacker can overwrite arbitrary files on the system by supplying a crafted zip archive containing files with path traversal sequences...

Linux Distros Unpatched Vulnerability : CVE-2018-14630

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - moodle before versions 3.5.2, 3.4.5, 3.3.8, 3.1.14 is vulnerable to an XML import of ddwtos could lead to intentional remote code execution. When importing lega...