EUVD-2022-3656

Malicious code in bioql PyPI...

EUVD-2022-3180

Malicious code in bioql PyPI...

EUVD-2023-2760

Malicious code in bioql PyPI...

EUVD-2024-33766

Malicious code in bioql PyPI...

EUVD-2023-0986

Malicious code in bioql PyPI...

EUVD-2022-4146

Malicious code in bioql PyPI...

EUVD-2025-5508

Malicious code in bioql PyPI...

EUVD-2023-1038

Malicious code in bioql PyPI...

EUVD-2025-12792

Malicious code in bioql PyPI...

RLSA-2025:8131 Moderate: ruby security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fixes: net-imap: Net::IMAP vulnerable to possible DoS by memory exhaustion CVE-2025-25186 CGI: Denial of Service in CGI::Cookie.parse...

ruby security update

An update is available for ruby. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Ruby is an extensible, interpreted, object-oriented, scripting language. It has...

PT-2025-40531

TCL 65C655 Smart TV, running firmware version V8-R75PT01-LF1V269.001116 Android TV, Kernel 5.4.242+, is vulnerable to a blind, unauthenticated Server-Side Request Forgery SSRF vulnerability via the UPnP MediaRenderer service AVTransport:1. The device accepts unauthenticated SetAVTransportURI SOAP...

CVE-2024-55017

Account Takeover in Corezoid 6.6.0 in the OAuth2 implementation via an open redirect in the redirecturi parameter allows attackers to intercept authorization codes and gain unauthorized access to victim accounts...

CVE-2024-55017

Account Takeover in Corezoid 6.6.0 in the OAuth2 implementation via an open redirect in the redirecturi parameter allows attackers to intercept authorization codes and gain unauthorized access to victim accounts...

CVE-2024-55017

Account Takeover in Corezoid 6.6.0 in the OAuth2 implementation via an open redirect in the redirecturi parameter allows attackers to intercept authorization codes and gain unauthorized access to victim accounts...

Security Bulletin: IBM App Connect Enterprise is vulnerable to Allocation of Resources Without Limits or Throttling due to Node.js module axios (CVE-2025-58754)

Summary IBM App Connect Enterprise Connector Discovery and OpenAPI Editor and IBM App Connect Enterprise runtime are vulnerable to Allocation of Resources Without Limits or Throttling due to Node.js module axios. Vulnerability Details CVEID:CVE-2025-58754 DESCRIPTION: Axios is a promise based HTT...

CVE-2024-55017

CVE-2024-55017 concerns Corezoid 6.6.0. The vulnerability arises in the OAuth2 flow via an open redirect in the redirect_uri parameter, enabling an attacker to intercept authorization codes and gain unauthorized access to victim accounts. Documents consistently describe an account takeover risk d...

CVE-2025-9115

The Etsy Shop WordPress plugin before 3.0.7 does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers...

CVE-2025-9115

The Etsy Shop WordPress plugin before 3.0.7 does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers...

CVE-2025-9115 Etsy Shop < 3.0.7 - Reflected XSS via $_SERVER['REQUEST_URI']

The Etsy Shop WordPress plugin before 3.0.7 does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers...