EUVD-2022-7567

Malicious code in bioql PyPI...

EUVD-2024-0716

Malicious code in bioql PyPI...

EUVD-2022-1866

Malicious code in bioql PyPI...

EUVD-2024-35248

Malicious code in bioql PyPI...

EUVD-2024-49325

Malicious code in bioql PyPI...

EUVD-2022-51925

Malicious code in bioql PyPI...

EUVD-2022-1359

Malicious code in bioql PyPI...

EUVD-2023-58222

Malicious code in bioql PyPI...

EUVD-2022-2461

Malicious code in bioql PyPI...

EUVD-2023-59288

Malicious code in bioql PyPI...

EUVD-2022-41824

Malicious code in bioql PyPI...

EUVD-2022-29609

Malicious code in bioql PyPI...

EUVD-2022-43005

Malicious code in bioql PyPI...

VulnCheck KEV: CVE-2024-21650

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki is vulnerable to a remote code execution RCE attack through its user registration feature. This issue allows an attacker to execute arbitrary code by crafting malicious payloads in the...

CVE-2025-59826 FlagForgeCTF Vulnerable to Unauthorized Problem Creation

Flag Forge is a Capture The Flag CTF platform. In version 2.1.0, non-admin users can create arbitrary challenges, potentially introducing malicious, incorrect, or misleading content. This issue has been patched in version 2.2.0...

CVE-2025-59335

CubeCart is an ecommerce software solution. Prior to version 6.5.11, there is an absence of automatic session expiration following a user's password change. This oversight poses a security risk, as if a user forgets to log out from a location where they accessed their account, an unauthorized use...

PT-2025-38742

Name of the Vulnerable Software and Affected Versions CubeCart versions prior to 6.5.11 Description CubeCart is an ecommerce software solution. Prior to version 6.5.11, user sessions do not automatically expire after a password change. This allows an attacker who has already compromised an accoun...

How Far Are We? an Empirical Analysis of Current Vulnerability Localization Approaches

Open-source software vulnerability patch detection is a critical component for maintaining software security and ensuring software supply chain integrity. Traditional manual detection methods face significant scalability challenges when processing large volumes of commit histories, while being...

DEBIAN-CVE-2023-53443

In the Linux kernel, the following vulnerability has been resolved: mfd: arizona: Use pmruntimeresumeandget to prevent refcnt leak In arizonaclk32kenable, we should use pmruntimeresumeandget as pmruntimegetsync will increase the refcnt even when it returns an error...

CVE-2025-10619 sequa-ai sequa-mcp OAuth Server Discovery node-oauth-client-provider.ts redirectToAuthorization os command injection

A vulnerability was detected in sequa-ai sequa-mcp up to 1.0.13. This affects the function redirectToAuthorization of the file src/helpers/node-oauth-client-provider.ts of the component OAuth Server Discovery. Performing manipulation results in os command injection. Remote exploitation of the...