EUVD-2025-23496

Malicious code in bioql PyPI...

EUVD-2025-8335

Malicious code in bioql PyPI...

EUVD-2022-41363

Malicious code in bioql PyPI...

EUVD-2024-44949

Malicious code in bioql PyPI...

EUVD-2025-13768

Malicious code in bioql PyPI...

EUVD-2025-16254

Malicious code in bioql PyPI...

EUVD-2022-2376

Malicious code in bioql PyPI...

EUVD-2025-3946

Malicious code in bioql PyPI...

EUVD-2023-26893

Malicious code in bioql PyPI...

EUVD-2023-55849

Malicious code in bioql PyPI...

EUVD-2025-3873

Malicious code in bioql PyPI...

EUVD-2023-43650

Malicious code in bioql PyPI...

EUVD-2025-4963

Malicious code in bioql PyPI...

EUVD-2024-37621

Malicious code in bioql PyPI...

WordPress Prevent files / folders access Plugin <= 2.6.0 - Path Traversal Vulnerability

Path Traversal Vulnerability discovered by Martino Spagnuolo r3verii in WordPress Plugin Prevent files / folders access versions = 2.6.0...

CVE-2025-21012

Improper access control in fall detection for Galaxy Watch prior to SMR Aug-2025 Release 1 allows local attackers to modify fall detection configuration...

CVE-2025-52892

EspoCRM versions 9.1.6 and earlier are affected. If a user loads the SPA frontend with a URL containing a double slash (for example https://domain//#Admin) and the server does not strip it, the Slim router cache can be corrupted, rendering the instance unusable until a complete rebuild. This vuln...

CVE-2025-53902

Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition prior to version 16.9.99.1752585665 and Tuleap Enterprise Edition prior to 16.8-6 and 16.9-5, users may potentially access confidential information from artifacts...

CVE-2025-37110 Sensitive Credential Information stored insecurely in System Database

A vulnerability was discovered in the storage policy for certain sets of sensitive credential information in the HPE Telco Network Function Virtual Orchestrator. Successful Exploitation could lead to unauthorized parties gaining access to sensitive system information...

CVE-2025-29557

ExaGrid EX10 6.3 - 7.0.1.P08 is vulnerable to Incorrect Access Control in the MailConfiguration API endpoint, where users with operator-level privileges can issue an HTTP request to retrieve SMTP credentials, including plaintext passwords...