EUVD-2025-30765

Malicious code in bioql PyPI...

EUVD-2025-28138

Malicious code in bioql PyPI...

EUVD-2024-29179

Malicious code in bioql PyPI...

EUVD-2022-4323

Malicious code in bioql PyPI...

EUVD-2022-1318

Malicious code in bioql PyPI...

Fedora 41 : ntpd-rs (2025-ee9b86c6d9)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-ee9b86c6d9 advisory. Update to version 1.6.2. Includes fixes for CVE-2025-58066 potential DoS in the ntpd-rs server and CVE-2025-58160 potential tracing log pollution...

Fedora 43 : ntpd-rs (2025-cf3fbd8fcf)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-cf3fbd8fcf advisory. Update to version 1.6.2. Includes fixes for CVE-2025-58066 potential DoS in the ntpd-rs server and CVE-2025-58160 potential tracing log pollution...

CVE-2025-53461

Server-Side Request Forgery SSRF vulnerability in Binsaifullah Beaf image-compare-block allows Server Side Request Forgery.This issue affects Beaf: from n/a through = 1.6.2...

CVE-2025-53461

Server-Side Request Forgery SSRF vulnerability in Binsaifullah Beaf image-compare-block allows Server Side Request Forgery.This issue affects Beaf: from n/a through = 1.6.2...

Linux Distros Unpatched Vulnerability : CVE-2020-23109

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow vulnerability in function convertcolorspace in heifcolorconversion.cc in libheif v1.6.2, allows attackers to cause a denial of service and...

Linux Distros Unpatched Vulnerability : CVE-2020-7955

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul and Consul Enterprise 1.4.1 through 1.6.2 did not uniformly enforce ACLs across all API endpoints, resulting in potential unintended informatio...

CVE-2025-8066

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Bunkerity Bunker Web on Linux allows Phishing.This issue affects Bunker Web: 1.6.2...

CVE-2025-8066

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Bunkerity Bunker Web on Linux allows Phishing.This issue affects Bunker Web: 1.6.2...

CVE-2025-8066

CVE-2025-8066 is a reported open redirect vulnerability in Bunkerity Bunker Web (Linux) affecting version 1.6.2 . The issue is described as a URL redirection to an untrusted site, enabling phishing attempts. The available connected sources consistently identify the vulnerable component as the Bun...

CVE-2025-8066 Bunker Web 1.6.2 - Uncontrolled external site redirect

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Bunkerity Bunker Web on Linux allows Phishing.This issue affects Bunker Web: 1.6.2...

PT-2025-33496

Name of the Vulnerable Software and Affected Versions: Bunkerity Bunker Web version 1.6.2 Description: A URL Redirection to Untrusted Site 'Open Redirect' vulnerability exists in Bunkerity Bunker Web on Linux, which can be leveraged for phishing attacks. Recommendations: At the moment, there is n...

BunkerWeb 输入验证错误漏洞

BunkerWeb is an open source web application firewall from Bunkerity Open Source. An input validation error vulnerability exists in BunkerWeb version 1.6.2, which stems from URL redirection to an untrusted site and could lead to phishing attacks...

CVE-2025-5529 Educenter <= 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Educenter theme for WordPress is vulnerable to Stored Cross-Site Scripting via the Circle Counter Block in all versions up to, and including, 1.6.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...

WordPress Educenter plugin <= 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Theme Educenter versions = 1.6.2...

WebSSH Cross-site Scripting vulnerability

A vulnerability, which was classified as problematic, has been found in Huashengdun WebSSH up to 1.6.2. Affected by this issue is some unknown functionality of the component Login Page. The manipulation of the argument hostname/port leads to cross site scripting. The attack may be launched...