EUVD-2024-2207

Malicious code in bioql PyPI...

EUVD-2024-3371

Malicious code in bioql PyPI...

EUVD-2025-1951

Malicious code in bioql PyPI...

EUVD-2024-51313

Malicious code in bioql PyPI...

EUVD-2025-3991

Malicious code in bioql PyPI...

EUVD-2025-2008

Malicious code in bioql PyPI...

EUVD-2023-2266

Malicious code in bioql PyPI...

EUVD-2024-0376

Malicious code in bioql PyPI...

EUVD-2022-38108

Malicious code in bioql PyPI...

EUVD-2025-13568

Malicious code in bioql PyPI...

EUVD-2023-43063

Malicious code in bioql PyPI...

EUVD-2025-20210

Malicious code in bioql PyPI...

CVE-2025-8729 MigoXLab LMeterX upload_service.py process_cert_files path traversal

A vulnerability has been found in MigoXLab LMeterX 1.2.0 and classified as critical. Affected by this vulnerability is the function processcertfiles of the file backend/service/uploadservice.py. The manipulation of the argument taskid leads to path traversal. The attack can be launched remotely...

CVE-2025-29865

: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in TAGFREE X-Free Uploader XFU allows Path Traversal.This issue affects X-Free Uploader: from 1.0.1.0084 before 1.0.1.0085, from 2.0.1.0034 before 2.0.1.0035...

CVE-2025-54652

Path traversal vulnerability in the virtualization base module. Successful exploitation of this vulnerability may affect the confidentiality of the virtualization module...

CVE-2025-54652

Path traversal vulnerability in the virtualization base module. Successful exploitation of this vulnerability may affect the confidentiality of the virtualization module...

CVE-2012-10024 XBMC ≤ 11.0 Web Server Path Traversal

XBMC version 11.0 contains a path traversal vulnerability in its embedded HTTP server. When accessed via HTTP Basic Authentication, the server fails to properly sanitize URI input, allowing authenticated users to request files outside the intended document root. An attacker can exploit this flaw ...

CVE-2025-54387 IPX is Vulnerable to Path Traversal via Prefix Matching Bypass

IPX is an image optimizer powered by sharp and svgo. In versions 1.3.1 and below, 2.0.0-0 through 2.1.0, and 3.0.0 through 3.1.0, the approach used to check whether a path is within allowed directories is vulnerable to path prefix bypass when the allowed directories do not end with a path...

ALSA-2025:12834 Moderate: python3.12-setuptools security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

CVE-2025-8522 givanz Vvvebjs node.js save.php path traversal

A vulnerability, which was classified as critical, was found in givanz Vvvebjs up to 2.0.4. Affected is an unknown function of the file /save.php of the component node.js. The manipulation of the argument File leads to path traversal. It is possible to launch the attack remotely. The complexity o...