EUVD-2022-3674

Malicious code in bioql PyPI...

EUVD-2024-24351

Malicious code in bioql PyPI...

EUVD-2022-0938

Malicious code in bioql PyPI...

EUVD-2023-0533

Malicious code in bioql PyPI...

EUVD-2024-19279

Malicious code in bioql PyPI...

EUVD-2022-3851

Malicious code in bioql PyPI...

EUVD-2022-4620

Malicious code in bioql PyPI...

EUVD-2022-5412

Malicious code in bioql PyPI...

Security Bulletin: A vulnerability has been identified in OPUPI0 AMQP/MQTT (All versions < V5.30).

Summary A vulnerability has been identified in OPUPI0 AMQP/MQTT All versions V5.30. Vulnerability Details CVEID:CVE-2024-31486 DESCRIPTION: A vulnerability has been identified in OPUPI0 AMQP/MQTT All versions V5.30. The affected devices stores MQTT client passwords without sufficient protection o...

Linux Distros Unpatched Vulnerability : CVE-2021-22095

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Spring AMQP versions 2.2.0 - 2.2.19 and 2.3.0 - 2.3.11, the Spring AMQP Message object, in its toString method, will create a new String object from the...

Malicious code in feathers-amqp-events (npm)

The package feathers-amqp-events was found to contain malicious code...

MAL-2025-32760 Malicious code in sc-bunyan-logstash-amqp (npm)

The package sc-bunyan-logstash-amqp was found to contain malicious code...

MAL-2025-32762 Malicious code in sc.amqp (npm)

The package sc.amqp was found to contain malicious code...

Malicious code in sc-bunyan-logstash-amqp (npm)

The package sc-bunyan-logstash-amqp was found to contain malicious code...

MAL-2025-20342 Malicious code in feathers-amqp-events (npm)

The package feathers-amqp-events was found to contain malicious code...

CVE-2024-31486

A vulnerability has been identified in OPUPI0 AMQP/MQTT All versions V5.30. The affected devices stores MQTT client passwords without sufficient protection on the devices. An attacker with remote shell access or physical access could retrieve the credentials leading to confidentiality loss...

CVE-2023-24447

A cross-site request forgery CSRF vulnerability in Jenkins RabbitMQ Consumer Plugin 2.8 and earlier allows attackers to connect to an attacker-specified AMQPS URL using attacker-specified username and password...

CVE-2021-22095

In Spring AMQP versions 2.2.0 - 2.2.19 and 2.3.0 - 2.3.11, the Spring AMQP Message object, in its toString method, will create a new String object from the message body, regardless of its size. This can cause an OOM Error with a large message...

CVE-2020-27217

In Eclipse Hono version 1.3.0 and 1.4.0 the AMQP protocol adapter does not verify the size of AMQP messages received from devices. In particular, a device may send messages that are bigger than the max-message-size that the protocol adapter has indicated during link establishment. While the AMQP...

CVE-2020-27220

The Eclipse Hono AMQP and MQTT protocol adapters do not check whether an authenticated gateway device is authorized to receive command & control messages when it has subscribed only to commands for a specific device. The missing check involves verifying that the command target device is configure...