EUVD-2025-19874

Malicious code in bioql PyPI...

EUVD-2022-4520

Malicious code in bioql PyPI...

EUVD-2023-44620

Malicious code in bioql PyPI...

EUVD-2022-40850

Malicious code in bioql PyPI...

EUVD-2024-2044

Malicious code in bioql PyPI...

EUVD-2023-43319

Malicious code in bioql PyPI...

EUVD-2025-29161

Malicious code in bioql PyPI...

EUVD-2025-26158

Malicious code in bioql PyPI...

EUVD-2025-4989

Malicious code in bioql PyPI...

EUVD-2022-28986

Malicious code in bioql PyPI...

EUVD-2023-59418

Malicious code in bioql PyPI...

EUVD-2022-52908

Malicious code in bioql PyPI...

EUVD-2022-50320

Malicious code in bioql PyPI...

EUVD-2023-45150

Malicious code in bioql PyPI...

EUVD-2022-44471

Malicious code in bioql PyPI...

grafana-pcp security update

An update is available for grafana-pcp. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Grafana plugin for Performance Co-Pilot includes datasources for...

Hitachi Pentaho Business Analytics Server 8.3.x < 9.3.0.2 / 9.4.x < 9.4.0.1 Remote Code Execution

Hitachi Pentaho Business Analytics Server versions 8.3.x prior to 9.3.0.2 or 9.4.x prior to 9.4.0.1 suffer from a remote code execution vulnerability. An attacker can exploit this issue by sending a specially crafted HTTP request to the affected application. A successful exploit could allow the...

CVE-2025-40646

CVE-2025-40646 describes a Stored Cross-Site Scripting (XSS) in Energy CRM v2025 by Status Tracker Ltd. The vulnerability arises from insufficient validation of user input in a POST to /crm/create_job_submit.php, using the JobCreatedBy parameter. An attacker could craft a request that, when viewe...

CVE-2025-28357

A CRLF injection vulnerability in Neto CMS v6.313.0 through v6.314.0 allows attackers to execute arbitrary code via supplying a crafted HTTP request...

CVE-2025-11030

A vulnerability was detected in Tutorials-Website Employee Management System up to 611887d8f8375271ce8abc704507d46340837a60. Impacted is an unknown function of the file /admin/all-applied-leave.php of the component HTTP Request Handler. The manipulation results in improper authorization. The atta...