EUVD-2022-33791

Malicious code in bioql PyPI...

EUVD-2021-8162

Malicious code in bioql PyPI...

EUVD-2022-6849

Malicious code in bioql PyPI...

EUVD-2024-49012

Malicious code in bioql PyPI...

EUVD-2022-24942

Malicious code in bioql PyPI...

EUVD-2022-52242

Malicious code in bioql PyPI...

EUVD-2023-51896

Malicious code in bioql PyPI...

EUVD-2025-20842

Malicious code in bioql PyPI...

EUVD-2023-35331

Malicious code in bioql PyPI...

EUVD-2023-52868

Malicious code in bioql PyPI...

EUVD-2021-8647

Malicious code in bioql PyPI...

EUVD-2022-36244

Malicious code in bioql PyPI...

PT-2025-40610

LiteLLM Information health API KEY Information Disclosure Vulnerability...

CVE-2025-59405

The Flock Safety Peripheral com.flocksafety.android.peripheral application 7.38.3 for Android installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices contains a cleartext DataDog API key within in its codebase. Because application binaries can be trivially decompil...

CVE-2025-59405

The Flock Safety Peripheral com.flocksafety.android.peripheral application 7.38.3 for Android installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices contains a cleartext DataDog API key within in its codebase. Because application binaries can be trivially decompil...

CVE-2025-10360 Insufficiently Protected Credentials in Puppet Enterprise 2025.4 and 2025.5

In Puppet Enterprise versions 2025.4.0 and 2025.5, the encryption key used for encrypting content in the Infra Assistant database was not excluded from the files gathered by Puppet backup. The key is only present on the system if the user has a Puppet Enterprise Advanced license and has enabled t...

CVE-2025-10360

CVE-2025-10360 affects Puppet Enterprise 2025.4.0 and 2025.5, where the encryption key for the Infra Assistant database was not excluded from files collected by Puppet backup. The key is present only for users with an Infra Assistant license and feature enabled, and it protects the API key for th...

CVE-2025-10360

In Puppet Enterprise versions 2025.4.0 and 2025.5, the encryption key used for encrypting content in the Infra Assistant database was not excluded from the files gathered by Puppet backup. The key is only present on the system if the user has a Puppet Enterprise Advanced license and has enabled t...

Exploit for CVE-2025-58180

CVE-2025-58180 RCE in OctoPrint via Unsanitized Filename in Fi...

GO-2025-3921 Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder

Coder accepts an APIKey beyond the linked OIDC expiry if there is no refresh token in github.com/coder/coder...