EUVD-2022-7167

Malicious code in bioql PyPI...

EUVD-2023-44836

Malicious code in bioql PyPI...

EUVD-2023-2980

Malicious code in bioql PyPI...

EUVD-2022-3560

Malicious code in bioql PyPI...

EUVD-2022-2991

Malicious code in bioql PyPI...

EUVD-2022-4202

Malicious code in bioql PyPI...

EUVD-2022-3731

Malicious code in bioql PyPI...

EUVD-2022-1656

Malicious code in bioql PyPI...

EUVD-2024-3279

Malicious code in bioql PyPI...

EUVD-2025-14813

Malicious code in bioql PyPI...

EUVD-2022-24989

Malicious code in bioql PyPI...

EUVD-2023-33012

Malicious code in bioql PyPI...

CVE-2025-20369

In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a low privilege user that does not hold the "admin" or "power" Splunk roles could perform an extensible markup language XML external entity XXE...

CVE-2025-10183

A blind XML External Entity XXE injection in the OpenMessaging webservice in TecCom TecConnect 4.1 allows an unauthenticated attacker to exfiltrate arbitrary files to an attacker-controlled server. TecConnect 4.1 is considered end-of-life as of December 2023. Users are advised to upgrade to TecCo...

vulnerable-python-poc-exploit

Отчет по анализу уязвимостей Python приложения vulnerable...

Linux Distros Unpatched Vulnerability : CVE-2012-5657

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The 1 ZendFeedRss and 2 ZendFeedAtom classes in ZendFeed in Zend Framework 1.11.x before 1.11.15 and 1.12.x before 1.12.1 allow remote attackers to read arbitra...

Linux Distros Unpatched Vulnerability : CVE-2017-14868

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Restlet Framework before 2.3.11, when using SimpleXMLProvider, allows remote attackers to access arbitrary files via an XXE attack in a REST API HTTP request...

Linux Distros Unpatched Vulnerability : CVE-2022-26661

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An XXE issue was discovered in Tryton Application Platform Server 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton...

Enterprise Search 8.18.6, 8.19.3 Security Update (ESA-2025-15) (CVE-2025-54988)

Enterprise Search XML external entity XXE injection in Apache Tika ESA-2025-15 On August 20, 2025, CVE-2025-54988 in Apache Tika PDF parser module was announced, disclosing an XML External Entity injection flaw in the Apache Tika tika-parser-pdf-module. This vulnerability allows an attacker to...

Elasticsearch 8.18.6, 8.19.3, 9.0.6, and 9.1.3 Security Update (ESA-2025-14) (CVE-2025-54988)

Elasticsearch XML external entity XXE injection in Apache Tika ESA-2025-14 On August 20, 2025, CVE-2025-54988 in Apache Tika PDF parser module was announced, disclosing an XML External Entity injection flaw in the Apache Tika tika-parser-pdf-module. This vulnerability allows an attacker to provid...