EUVD-2023-51734

Malicious code in bioql PyPI...

EUVD-2024-52227

Malicious code in bioql PyPI...

EUVD-2022-7567

Malicious code in bioql PyPI...

EUVD-2022-29283

Malicious code in bioql PyPI...

EUVD-2023-26617

Malicious code in bioql PyPI...

EUVD-2024-25933

Malicious code in bioql PyPI...

EUVD-2023-2080

Malicious code in bioql PyPI...

EUVD-2024-29118

Malicious code in bioql PyPI...

EUVD-2024-0897

Malicious code in bioql PyPI...

EUVD-2023-38335

Malicious code in bioql PyPI...

EUVD-2025-13343

Malicious code in bioql PyPI...

EUVD-2022-7215

Malicious code in bioql PyPI...

EUVD-2024-54538

Malicious code in bioql PyPI...

VulnCheck KEV: CVE-2024-21650

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki is vulnerable to a remote code execution RCE attack through its user registration feature. This issue allows an attacker to execute arbitrary code by crafting malicious payloads in the...

CVE-2025-59826 FlagForgeCTF Vulnerable to Unauthorized Problem Creation

Flag Forge is a Capture The Flag CTF platform. In version 2.1.0, non-admin users can create arbitrary challenges, potentially introducing malicious, incorrect, or misleading content. This issue has been patched in version 2.2.0...

CVE-2025-59335

CubeCart is an ecommerce software solution. Prior to version 6.5.11, there is an absence of automatic session expiration following a user's password change. This oversight poses a security risk, as if a user forgets to log out from a location where they accessed their account, an unauthorized use...

PT-2025-38742

Name of the Vulnerable Software and Affected Versions CubeCart versions prior to 6.5.11 Description CubeCart is an ecommerce software solution. Prior to version 6.5.11, user sessions do not automatically expire after a password change. This allows an attacker who has already compromised an accoun...

How Far Are We? an Empirical Analysis of Current Vulnerability Localization Approaches

Open-source software vulnerability patch detection is a critical component for maintaining software security and ensuring software supply chain integrity. Traditional manual detection methods face significant scalability challenges when processing large volumes of commit histories, while being...

DEBIAN-CVE-2023-53443

In the Linux kernel, the following vulnerability has been resolved: mfd: arizona: Use pmruntimeresumeandget to prevent refcnt leak In arizonaclk32kenable, we should use pmruntimeresumeandget as pmruntimegetsync will increase the refcnt even when it returns an error...

CVE-2025-10619 sequa-ai sequa-mcp OAuth Server Discovery node-oauth-client-provider.ts redirectToAuthorization os command injection

A vulnerability was detected in sequa-ai sequa-mcp up to 1.0.13. This affects the function redirectToAuthorization of the file src/helpers/node-oauth-client-provider.ts of the component OAuth Server Discovery. Performing manipulation results in os command injection. Remote exploitation of the...