EUVD-2024-31713

Malicious code in bioql PyPI...

EUVD-2025-17448

Malicious code in bioql PyPI...

EUVD-2021-7010

Malicious code in bioql PyPI...

EUVD-2022-29597

Malicious code in bioql PyPI...

EUVD-2022-38119

Malicious code in bioql PyPI...

EUVD-2025-3737

Malicious code in bioql PyPI...

EUVD-2022-28110

Malicious code in bioql PyPI...

EUVD-2023-29555

Malicious code in bioql PyPI...

EUVD-2023-58972

Malicious code in bioql PyPI...

EUVD-2025-8625

Malicious code in bioql PyPI...

EUVD-2023-41387

Malicious code in bioql PyPI...

EUVD-2024-2677

Malicious code in bioql PyPI...

EUVD-2024-2329

Malicious code in bioql PyPI...

EUVD-2024-34569

Malicious code in bioql PyPI...

EUVD-2024-41492

Malicious code in bioql PyPI...

GHSA-9V8P-M85M-F7MM Mautic vulnerable to reflected XSS in lead:addLeadTags - Quick Add

Summary A Cross-Site Scripting XSS vulnerability allows an attacker to execute arbitrary JavaScript in the context of another user’s session. This occurs because user-supplied input is reflected back in the server’s response without proper sanitization or escaping, potentially enabling malicious...

Linux Distros Unpatched Vulnerability : CVE-2022-39234

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features,...

CVE-2025-30064 Possibility to generate a session for any user via the "ex:action" parameter after obtaining access to the JWT key

An insufficiently secured internal function allows session generation for arbitrary users. The decodeParam function checks the JWT but does not verify which signing algorithm was used. As a result, an attacker can use the "ex:action" parameter in the VerifyUserByThrustedService function to genera...

CVE-2025-30064 Possibility to generate a session for any user via the "ex:action" parameter after obtaining access to the JWT key

An insufficiently secured internal function allows session generation for arbitrary users. The decodeParam function checks the JWT but does not verify which signing algorithm was used. As a result, an attacker can use the "ex:action" parameter in the VerifyUserByThrustedService function to genera...

CVE-2025-30039

Technical details about CVE-2025-30039 are not publicly available in the provided documents; no explicit affected products, versions, or remediation are given in connected documents. Monitor for updates.