EUVD-2025-29664

Malicious code in bioql PyPI...

EUVD-2022-32114

Malicious code in bioql PyPI...

EUVD-2023-34350

Malicious code in bioql PyPI...

EUVD-2024-54102

Malicious code in bioql PyPI...

EUVD-2024-42137

Malicious code in bioql PyPI...

EUVD-2021-28170

Malicious code in bioql PyPI...

EUVD-2025-25195

Malicious code in bioql PyPI...

EUVD-2024-38278

Malicious code in bioql PyPI...

EUVD-2024-26250

Malicious code in bioql PyPI...

EUVD-2025-12220

Malicious code in bioql PyPI...

EUVD-2023-38497

Malicious code in bioql PyPI...

EUVD-2024-41309

Malicious code in bioql PyPI...

EUVD-2022-36189

Malicious code in bioql PyPI...

EUVD-2023-57646

Malicious code in bioql PyPI...

CVE-2025-36351

IBM License Metric Tool version 9.2.0–9.2.40 is affected by CVE-2025-36351, where an authenticated user could bypass REST API access controls and perform unauthorized actions. The issue stems from insufficient authorization checks in the REST API and is rated with CVSSv3.1 base score 4.3 (MEDIUM)...

CVE-2025-20334

A vulnerability in the HTTP API subsystem of Cisco IOS XE Software could allow a remote attacker to inject commands that will execute with root privileges into the underlying operating system. This vulnerability is due to insufficient input validation. An attacker with administrative privileges...

CVE-2025-20334

A vulnerability in the HTTP API subsystem of Cisco IOS XE Software could allow a remote attacker to inject commands that will execute with root privileges into the underlying operating system. This vulnerability is due to insufficient input validation. An attacker with administrative privileges...

PT-2025-39305

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description A flaw exists in the HTTP API subsystem of Cisco IOS XE Software that may allow a remote attacker to inject commands that will execute with root privileges on the underlying...

GHSA-79HX-3FP8-HJ66 DragonFly vulnerable to arbitrary file read and write on a peer machine

Impact A peer exposes the gRPC API and HTTP API for consumption by other peers. These APIs allow peers to send requests that force the recipient peer to create files in arbitrary file system locations, and to read arbitrary files. This allows peers to steal other peers’ secret data and to gain...

CVE-2025-59352 Dragonfly allows arbitrary file read and write on a peer machine

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the gRPC API and HTTP APIs allow peers to send requests that force the recipient peer to create files in arbitrary file system locations, and to read arbitrary files. This allows peers to steal...