EUVD-2023-33405

Malicious code in bioql PyPI...

EUVD-2025-22653

Malicious code in bioql PyPI...

EUVD-2023-31261

Malicious code in bioql PyPI...

EUVD-2022-5322

Malicious code in bioql PyPI...

EUVD-2022-2762

Malicious code in bioql PyPI...

EUVD-2025-27633

Malicious code in bioql PyPI...

EUVD-2025-24978

Malicious code in bioql PyPI...

EUVD-2022-38408

Malicious code in bioql PyPI...

EUVD-2023-2717

Malicious code in bioql PyPI...

EUVD-2023-44209

Malicious code in bioql PyPI...

EUVD-2022-7038

Malicious code in bioql PyPI...

EUVD-2022-3503

Malicious code in bioql PyPI...

EUVD-2025-30509

Malicious code in bioql PyPI...

EUVD-2024-48046

Malicious code in bioql PyPI...

EUVD-2025-22780

Malicious code in bioql PyPI...

EUVD-2024-50789

Malicious code in bioql PyPI...

EUVD-2023-0467

Malicious code in bioql PyPI...

EUVD-2022-44450

Malicious code in bioql PyPI...

EUVD-2022-6293

Malicious code in bioql PyPI...

EUVD-2025-25015

Malicious code in bioql PyPI...

EUVD-2022-38715

Malicious code in bioql PyPI...

EUVD-2023-24274

Malicious code in bioql PyPI...

EUVD-2025-2853

Malicious code in bioql PyPI...

EUVD-2024-49431

Malicious code in bioql PyPI...

EUVD-2022-6962

Malicious code in bioql PyPI...

EUVD-2022-43158

Malicious code in bioql PyPI...

EUVD-2022-42645

Malicious code in bioql PyPI...

EUVD-2022-35075

Malicious code in bioql PyPI...

EUVD-2022-31814

Malicious code in bioql PyPI...

EUVD-2025-20091

Malicious code in bioql PyPI...

EUVD-2022-0453

Malicious code in bioql PyPI...

EUVD-2024-16589

Malicious code in bioql PyPI...

EUVD-2022-2927

Malicious code in bioql PyPI...

EUVD-2025-22061

Malicious code in bioql PyPI...

EUVD-2023-55564

Malicious code in bioql PyPI...

EUVD-2025-18966

An OS command injection vulnerability exists in EnGenius EnShare Cloud Service version 1.4.11 and earlier. The usbinteract.cgi script fails to properly sanitize user input passed to the path parameter, allowing unauthenticated remote attackers to inject arbitrary shell commands. The injected...

EUVD-2026-75571

A missing S3 bucket ownership verification in the AWS Security Agent MCP server before 0.2.0 version might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and infrastructure state contained in that archive, via a pre-registered storage...

EUVD-2026-73690

Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network...

EUVD-2026-70654

Waku is the minimal React framework. Prior to version 1.0.0-beta.1, Waku's RSC request dispatcher invokes server actions without validating the request's Origin or Sec-Fetch-Site header. A cross-origin web attacker can therefore cause a victim browser to issue an authenticated POST to a registere...

EUVD-2026-68800

elFinder: ZIP extraction bypasses uploadDeny MIME filter allowing PHP file upload RCE...

EUVD-2026-69138

A denial-of-service security issue exists within RSLinx® Classic. The security issue stems from improper handling of a malformed packet. A crafted CIP packet can cause the RSLinx® Classic service to crash, requiring a restart of the service to recover...

EUVD-2026-53582

praisonaiagents has a webcrawl SSRF protection bypass via unchecked redirect targets...

EUVD-2026-63597

Race condition in V8 in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-62587

A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an arbitrary script by calling an undocumented function...

EUVD-2026-60541

Mattermost versions 11.7.x = 11.7.6, 10.11.x = 10.11.21, 11.8.x = 11.8.3 fail to enforce PermissionManageBoardRoles on the channelId field of the batch endpoint, which allows an authenticated board editor to relink any board they can edit to an arbitrary channel via a crafted PATCH request...

EUVD-2026-57188

A buffer copy without checking size of input 'classic buffer overflow' vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.11 may allow an unauthenticated attacker in a position to alter or craft DNS responses to the targeted host to execute...

EUVD-2026-57009

In the Mira hormone monitor device firmware v1.7.1.47 build 01070147, a remote unauthenticated attacker within BLE range approximately 10–30 meters can silently rebind the device to an attacker-controlled account, extract stored hormone measurements in cleartext, cause a denial-of-service via...

EUVD-2026-56618

Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...

EUVD-2026-56422

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally...

EUVD-2026-56544

is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope ...