EUVD-2025-5702

Malicious code in bioql PyPI...

EUVD-2024-0322

Malicious code in bioql PyPI...

EUVD-2023-35108

Malicious code in bioql PyPI...

EUVD-2024-23543

Malicious code in bioql PyPI...

EUVD-2023-53998

Malicious code in bioql PyPI...

EUVD-2024-19411

Malicious code in bioql PyPI...

EUVD-2025-19856

Malicious code in bioql PyPI...

EUVD-2025-25420

Malicious code in bioql PyPI...

EUVD-2022-6640

Malicious code in bioql PyPI...

EUVD-2022-1366

Malicious code in bioql PyPI...

EUVD-2025-27018

Malicious code in bioql PyPI...

EUVD-2025-28214

Malicious code in bioql PyPI...

EUVD-2023-58181

Malicious code in bioql PyPI...

EUVD-2022-0598

Malicious code in bioql PyPI...

EUVD-2023-54331

Malicious code in bioql PyPI...

EUVD-2024-47317

Malicious code in bioql PyPI...

EUVD-2023-54360

Malicious code in bioql PyPI...

EUVD-2024-54950

Malicious code in bioql PyPI...

EUVD-2024-26765

Malicious code in bioql PyPI...

EUVD-2025-12975

Malicious code in bioql PyPI...

EUVD-2024-54957

Malicious code in bioql PyPI...

EUVD-2025-12747

Malicious code in bioql PyPI...

EUVD-2022-47659

Malicious code in bioql PyPI...

EUVD-2025-17441

Malicious code in bioql PyPI...

EUVD-2022-6117

Malicious code in bioql PyPI...

EUVD-2023-23418

Malicious code in bioql PyPI...

EUVD-2024-30434

Malicious code in bioql PyPI...

EUVD-2022-4315

Malicious code in bioql PyPI...

EUVD-2022-52311

Malicious code in bioql PyPI...

EUVD-2023-41815

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Creative Solutions Contact Form Generator plugin = 2.5.5 versions...

EUVD-2026-82340

A vulnerability has been found in code-projects Matrimonial System 1.0. This vulnerability affects the function writepartnerprefs of the file /partnerpreference.php. Such manipulation of the argument education leads to sql injection. The attack can be executed remotely. The exploit has been...

EUVD-2026-78421

PraisonAI is a multi-agent teams system. From 1.2.3 until 1.7.2, CommandValidator in src/praisonai-ts/src/cli/features/sandbox-executor.ts validates only the first whitespace-delimited executable against allowedCommands, then SandboxExecutor passes the complete command string to sh -c. A command...

EUVD-2026-73690

Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network...

EUVD-2026-72027

RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never attempted, allowing an unauthenticated client to open a session channel and send an exec request. On affected builds the server dispatches the command, enabling unauthenticated...

EUVD-2026-70381

@fastify/http-proxy versions before 11.6.2 do not validate proxied HTTP request paths for backslash based dot-segments before forwarding them to the configured upstream. The plain HTTP request handler skips the destination validation that the WebSocket path performs, and the underlying reply-from...

EUVD-2026-69734

Use after free in Browser in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2023-60613

Proxmox Virtual Environment VE 7.0 through 8.0 contains an authentication bypass vulnerability in libpve-access-control before 8.0.4 that allows unauthenticated attackers to authenticate as any existing enabled user without a configured second factor by supplying an arbitrary tfa-challenge value ...

EUVD-2026-68722

Unrestricted deserialization of untrusted data in the cursor pagination component in the OpenSearch SQL plugin allows a remote authenticated user with basic read/search permissions to execute arbitrary code on the server by sending a crafted cursor parameter to the plugins/sql endpoint...

EUVD-2026-66368

A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application...

EUVD-2026-67787

PLANET GS-4210-16P2S firmware before 3.441b260626 contains authenticated stack buffer overflow and null pointer dereference vulnerabilities in /cgi-bin/dispatcher.cgi. The webradiusSrvpost family of handlers copies the radKey, radKey0, radDftParamKey, radName, and radIp POST parameters into...

EUVD-2026-67399

The Smart Slider 3 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'slider' Block Attribute in all versions up to, and including, 3.5.1.38 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level...

EUVD-2026-39477

Trivy has a path traversal via a crafted vulnerability database or other downloaded artifacts...

EUVD-2026-63196

libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. Thus, a use-after-free can occur. NOTE: this is similar to CVE-2026-50219, CVE-2026-56131 and CVE-2026-56412...

EUVD-2026-62948

In versions below 1.0.5 of the RSA SecurID Authentication Manager app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive token serial by invoking either the enable token or revoke token action, because the action's tokenserial parameter is not masked...

EUVD-2026-58511

Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely...

EUVD-2026-57800

Flowise before 3.1.3 contains a sandbox escape vulnerability in pythonCodeValidator.ts that fails to block native Pandas DataFrame methods like tocsv, tojson, pipe, and query. Authenticated attackers can exploit this to exfiltrate uploaded CSV data or write arbitrary files to the server filesyste...

EUVD-2026-56985

Use after free in Extensions in Google Chrome prior to 151.0.7922.137 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. Chromium security severity: High...

EUVD-2025-210695

A DLL hijacking vulnerability in AMD Power Design Manager could allow a malicious local attacker to escalate privileges during the uninstallation process, potentially resulting in arbitrary code execution...

EUVD-2026-56625

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network...

EUVD-2026-56239

Missing bounds check in the annotator function of Zoom Clients allows buffer over-write, which may allow a meeting participant to achieve remote code execution of another participant via network access...