EUVD-2025-27715

Malicious code in bioql PyPI...

EUVD-2023-44370

Malicious code in bioql PyPI...

EUVD-2024-26250

Malicious code in bioql PyPI...

EUVD-2023-38497

Malicious code in bioql PyPI...

EUVD-2023-34350

Malicious code in bioql PyPI...

EUVD-2025-29664

Malicious code in bioql PyPI...

EUVD-2023-38495

Malicious code in bioql PyPI...

EUVD-2024-54369

Malicious code in bioql PyPI...

EUVD-2021-28170

Malicious code in bioql PyPI...

EUVD-2021-30478

Malicious code in bioql PyPI...

EUVD-2025-7073

Malicious code in bioql PyPI...

EUVD-2022-32114

Malicious code in bioql PyPI...

EUVD-2024-32054

Malicious code in bioql PyPI...

CVE-2025-36351

IBM License Metric Tool version 9.2.0–9.2.40 is affected by CVE-2025-36351, where an authenticated user could bypass REST API access controls and perform unauthorized actions. The issue stems from insufficient authorization checks in the REST API and is rated with CVSSv3.1 base score 4.3 (MEDIUM)...

CVE-2025-20334

A vulnerability in the HTTP API subsystem of Cisco IOS XE Software could allow a remote attacker to inject commands that will execute with root privileges into the underlying operating system. This vulnerability is due to insufficient input validation. An attacker with administrative privileges...

CVE-2025-20334

A vulnerability in the HTTP API subsystem of Cisco IOS XE Software could allow a remote attacker to inject commands that will execute with root privileges into the underlying operating system. This vulnerability is due to insufficient input validation. An attacker with administrative privileges...

PT-2025-39305

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description A flaw exists in the HTTP API subsystem of Cisco IOS XE Software that may allow a remote attacker to inject commands that will execute with root privileges on the underlying...

GHSA-79HX-3FP8-HJ66 DragonFly vulnerable to arbitrary file read and write on a peer machine

Impact A peer exposes the gRPC API and HTTP API for consumption by other peers. These APIs allow peers to send requests that force the recipient peer to create files in arbitrary file system locations, and to read arbitrary files. This allows peers to steal other peers’ secret data and to gain...

CVE-2025-59352 Dragonfly allows arbitrary file read and write on a peer machine

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the gRPC API and HTTP APIs allow peers to send requests that force the recipient peer to create files in arbitrary file system locations, and to read arbitrary files. This allows peers to steal...

Linux Distros Unpatched Vulnerability : CVE-2025-1385

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When the library bridge feature is enabled, the clickhouse-library-bridge exposes an HTTP API on localhost. This allows clickhouse-server to dynamically load a...