EUVD-2023-58624

Malicious code in bioql PyPI...

EUVD-2022-3224

Malicious code in bioql PyPI...

EUVD-2025-23199

Malicious code in bioql PyPI...

EUVD-2023-28741

Malicious code in bioql PyPI...

EUVD-2024-49524

Malicious code in bioql PyPI...

EUVD-2025-26525

Malicious code in bioql PyPI...

EUVD-2022-4097

Malicious code in bioql PyPI...

EUVD-2024-3232

Malicious code in bioql PyPI...

EUVD-2021-8172

Malicious code in bioql PyPI...

EUVD-2024-26136

Malicious code in bioql PyPI...

EUVD-2024-27709

Malicious code in bioql PyPI...

EUVD-2025-15793

Malicious code in bioql PyPI...

EUVD-2025-23298

Malicious code in bioql PyPI...

EUVD-2023-0944

Malicious code in bioql PyPI...

CVE-2025-59821

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. Prior to version 10.1.0, DNN’s URL/path handling and template rendering can allow specially crafted input to be reflected into a user profile that is returned to the browser. In these cases,...

CVE-2025-57396

Tandoor Recipes 2.0.0-alpha-1, fixed in 2.0.0-alpha-2, is vulnerable to privilege escalation. This is due to the rework of the API, which resulted in the User Profile API Endpoint containing two boolean values indicating whether a user is staff or administrative. Consequently, any user can escala...

CVE-2025-57396

Tandoor Recipes 2.0.0-alpha-1, fixed in 2.0.0-alpha-2, is vulnerable to privilege escalation. This is due to the rework of the API, which resulted in the User Profile API Endpoint containing two boolean values indicating whether a user is staff or administrative. Consequently, any user can escala...

BIT-JENKINS-2025-59475

Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check for the authenticated user profile dropdown menu, allowing attackers without Overall/Read permission to obtain limited information about the Jenkins configuration by listing available options in this menu e.g.,...

PT-2025-38623

Name of the Vulnerable Software and Affected Versions Tandoor Recipes versions 2.0.0-alpha-1 Description Tandoor Recipes 2.0.0-alpha-1 is susceptible to privilege escalation. This issue stems from a rework of the API, specifically within the User Profile API Endpoint. The endpoint contains two...

CVE-2025-57396: Improper Privilege Management

Tandoor Recipes 2.0.0-alpha-1, fixed in 2.0.0-alpha-2, is vulnerable to privilege escalation. This is due to the rework of the API, which resulted in the User Profile API Endpoint containing two boolean values indicating whether a user is staff or administrative. Consequently, any user can escala...