EUVD-2024-53976

Malicious code in bioql PyPI...

EUVD-2021-8632

Malicious code in bioql PyPI...

EUVD-2022-6839

Malicious code in bioql PyPI...

EUVD-2022-3481

Malicious code in bioql PyPI...

EUVD-2022-1914

Malicious code in bioql PyPI...

EUVD-2022-1138

Malicious code in bioql PyPI...

EUVD-2022-2386

Malicious code in bioql PyPI...

EUVD-2022-0617

Malicious code in bioql PyPI...

EUVD-2024-54360

Malicious code in bioql PyPI...

EUVD-2022-4613

Malicious code in bioql PyPI...

EUVD-2023-27070

Malicious code in bioql PyPI...

EUVD-2023-56110

Malicious code in bioql PyPI...

poc-scaner

Java POC Scanner A powerful graphical POC Proof of Concept...

Stack Overflow in Snakeyaml

...

NewStart CGSL MAIN 6.06 : PyYAML Vulnerability (NS-SA-2025-0215)

The remote NewStart CGSL host, running version MAIN 6.06, has PyYAML packages installed that are affected by a vulnerability: - scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML aka YAML-XS module for Perl, allows context-dependent attackers to cause a denial of service assertion...

Security Bulletin: Multiple vulnerabilities in IBM Aspera Console

Summary Multiple vulnerabilities were addressed in IBM Aspera Console version 3.4.7. Vulnerability Details CVEID:CVE-2022-44566 DESCRIPTION: A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter 7.0.4.1 and 6.1.7.1. When a value outside the range for a 64bit signed intege...

CVE-2025-56816

Datart 1.0.0-rc.3 is vulnerable to Directory Traversal. The configuration file handling of the application allows attackers to upload arbitrary YAML files to the config/jdbc-driver-ext.yml path. The application parses this file using SnakeYAML's unsafe load or loadAs method without input...

Exploit for CVE-2025-56815

CVE-2025-56815 Datart 1.0.0-rc.3 is vulnerable to Directory Tr...

PT-2025-39294

Name of the Vulnerable Software and Affected Versions Datart version 1.0.0-rc.3 Description The application allows attackers to upload arbitrary YAML files to the config/jdbc-driver-ext.yml path. The application parses these files using SnakeYAML's load or loadAs method without input sanitization...

CVE-2025-56816

Datart 1.0.0-rc.3 is vulnerable to Directory Traversal via uploading YAML to config/jdbc-driver-ext.yml, parsed with SnakeYAML unsafe load/loadAs. This allows attacker-controlled YAML deserialization, potentially enabling remote code execution (RCE) under certain conditions. Exploitation details ...