EUVD-2023-57646

Malicious code in bioql PyPI...

EUVD-2023-37406

Malicious code in bioql PyPI...

EUVD-2025-27715

Malicious code in bioql PyPI...

EUVD-2025-12220

Malicious code in bioql PyPI...

EUVD-2025-4862

Malicious code in bioql PyPI...

EUVD-2022-36189

Malicious code in bioql PyPI...

EUVD-2022-26601

Malicious code in bioql PyPI...

EUVD-2024-26246

Malicious code in bioql PyPI...

EUVD-2023-38495

Malicious code in bioql PyPI...

EUVD-2023-38499

Malicious code in bioql PyPI...

EUVD-2023-38497

Malicious code in bioql PyPI...

EUVD-2023-38498

Malicious code in bioql PyPI...

EUVD-2024-42137

Malicious code in bioql PyPI...

CVE-2025-36351

IBM License Metric Tool version 9.2.0–9.2.40 is affected by CVE-2025-36351, where an authenticated user could bypass REST API access controls and perform unauthorized actions. The issue stems from insufficient authorization checks in the REST API and is rated with CVSSv3.1 base score 4.3 (MEDIUM)...

CVE-2025-20334

A vulnerability in the HTTP API subsystem of Cisco IOS XE Software could allow a remote attacker to inject commands that will execute with root privileges into the underlying operating system. This vulnerability is due to insufficient input validation. An attacker with administrative privileges...

CVE-2025-20334

A vulnerability in the HTTP API subsystem of Cisco IOS XE Software could allow a remote attacker to inject commands that will execute with root privileges into the underlying operating system. This vulnerability is due to insufficient input validation. An attacker with administrative privileges...

PT-2025-39305

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description A flaw exists in the HTTP API subsystem of Cisco IOS XE Software that may allow a remote attacker to inject commands that will execute with root privileges on the underlying...

GHSA-79HX-3FP8-HJ66 DragonFly vulnerable to arbitrary file read and write on a peer machine

Impact A peer exposes the gRPC API and HTTP API for consumption by other peers. These APIs allow peers to send requests that force the recipient peer to create files in arbitrary file system locations, and to read arbitrary files. This allows peers to steal other peers’ secret data and to gain...

CVE-2025-59352 Dragonfly allows arbitrary file read and write on a peer machine

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the gRPC API and HTTP APIs allow peers to send requests that force the recipient peer to create files in arbitrary file system locations, and to read arbitrary files. This allows peers to steal...

CVE-2025-37128: Execution with Unnecessary Privileges

A vulnerability in the web API of HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote attacker to terminate arbitrary running processes. Successful exploitation could allow an attacker to disrupt system operations, potentially resulting in an unstable system state...