EUVD-2024-49038

Malicious code in bioql PyPI...

EUVD-2023-48152

Malicious code in bioql PyPI...

EUVD-2024-40407

Malicious code in bioql PyPI...

EUVD-2023-37456

Malicious code in bioql PyPI...

EUVD-2023-47098

Malicious code in bioql PyPI...

EUVD-2022-50316

Malicious code in bioql PyPI...

EUVD-2024-39594

Malicious code in bioql PyPI...

EUVD-2021-30938

Malicious code in bioql PyPI...

EUVD-2022-32115

Malicious code in bioql PyPI...

EUVD-2022-38154

Malicious code in bioql PyPI...

EUVD-2021-31549

Malicious code in bioql PyPI...

EUVD-2025-21166

Malicious code in bioql PyPI...

EUVD-2024-32156

Malicious code in bioql PyPI...

EUVD-2025-4645

Malicious code in bioql PyPI...

Denial of Service in CivetWeb

...

CVE-2025-20362

Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Software or Cisco Secure FTD Software releases that are affected by CVE-2025-20333 and CVE-2025-20362. This attack can cause unpatched devices to unexpectedly reload, leading to denial...

CVE-2025-20362

CVE-2025-20362 affects Cisco Secure Firewall ASA/FTD VPN web server. Root cause: improper validation of user-supplied input in HTTP(S) requests, allowing an unauthenticated remote attacker to access restricted VPN-related URL endpoints. Impact: potential DoS via unexpected reloads (and in some re...

HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)

A flaw was found in handling multiplexed streams in the HTTP/2 protocol. A client can repeatedly make a request for a new multiplex stream and immediately send an RSTSTREAM frame to cancel it. This creates extra work for the server setting up and tearing down the streams while not hitting any...

PT-2025-39198

Name of the Vulnerable Software and Affected Versions Tenda AC9 version 1.0 Description A command injection issue exists in Tenda AC9 version 1.0. The issue is due to a flaw in the formSetSambaConf function within the httpd file, specifically through the usb.samba.guest.user parameter. This allow...

PT-2025-89: NULL Pointer Dereference in Fastwel PLC web server

The vulnerability was identified in Fastwel programmable controllers, versions 3.4.5.0 CPM810-03, 3.4.9.1 СPM723-01. Exploitation of the vulnerability allows a remote attacker to cause a denial of service by sending multiple specially crafted HTTP requests. Vulnerability status: Confirmed by vend...