EUVD-2022-5170

Malicious code in bioql PyPI...

EUVD-2024-51609

Malicious code in bioql PyPI...

EUVD-2025-10959

Malicious code in bioql PyPI...

EUVD-2025-7045

Malicious code in bioql PyPI...

EUVD-2024-45779

Malicious code in bioql PyPI...

EUVD-2024-2162

Malicious code in bioql PyPI...

EUVD-2025-7534

Malicious code in bioql PyPI...

EUVD-2023-56365

Malicious code in bioql PyPI...

EUVD-2022-0698

Malicious code in bioql PyPI...

EUVD-2023-44379

Malicious code in bioql PyPI...

EUVD-2024-47194

Malicious code in bioql PyPI...

EUVD-2024-41068

Malicious code in bioql PyPI...

EUVD-2025-2081

Malicious code in bioql PyPI...

EUVD-2023-1901

Malicious code in bioql PyPI...

EUVD-2023-30943

Malicious code in bioql PyPI...

EUVD-2025-13633

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2025-5270

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In certain cases, SNI could have been sent unencrypted even when encrypted DNS was enabled. This vulnerability was fixed in Firefox 139 and Thunderbird 139...

CVE-2025-8529

A vulnerability classified as critical was found in cloudfavorites favorites-web up to 1.3.0. Affected by this vulnerability is the function getCollectLogoUrl of the file app/src/main/java/com/favorites/web/CollectController.java. The manipulation of the argument url leads to server-side request...

CVE-2025-8520 givanz Vvveb Drag-and-Drop Editor editor server-side request forgery

A vulnerability classified as critical was found in givanz Vvveb up to 1.0.5. This vulnerability affects unknown code of the file /vadmin123/?module=editor/editor of the component Drag-and-Drop Editor. The manipulation of the argument url leads to server-side request forgery. The attack can be...

PT-2025-31269

Name of the Vulnerable Software and Affected Versions BentoML versions 1.4.0 through 1.4.19 Description BentoML contains a Server-Side Request Forgery SSRF issue in the file upload processing system. This allows unauthenticated remote attackers to force the server to make arbitrary HTTP requests...