EUVD-2022-44445

Malicious code in bioql PyPI...

EUVD-2025-16370

Malicious code in bioql PyPI...

EUVD-2025-22332

Malicious code in bioql PyPI...

EUVD-2024-41714

Malicious code in bioql PyPI...

EUVD-2022-43588

Malicious code in bioql PyPI...

EUVD-2022-43590

Malicious code in bioql PyPI...

EUVD-2025-22333

Malicious code in bioql PyPI...

EUVD-2024-0671

Malicious code in bioql PyPI...

EUVD-2025-0169

Malicious code in bioql PyPI...

EUVD-2025-21169

Malicious code in bioql PyPI...

EUVD-2021-30344

Malicious code in bioql PyPI...

EUVD-2025-22316

Malicious code in bioql PyPI...

EUVD-2024-0622

Malicious code in bioql PyPI...

EUVD-2024-28187

Malicious code in bioql PyPI...

EUVD-2023-54794

Malicious code in bioql PyPI...

Fake Madgicx Plus and SocialMetrics Extensions Are Hijacking Meta Business Accounts

Cybersecurity researchers have disclosed two new campaigns that are serving fake browser extensions using malicious ads and fake websites to steal sensitive data. The malvertising campaign, per Bitdefender, is designed to push fake "Meta Verified" browser extensions named SocialMetrics Pro that...

CVE-2025-55162

A flaw was found in Envoy. A session management flaw was discovered in how Envoy's OAuth2 filter handles user logouts. This could allow a user's session to remain active even after they have logged out, creating a risk of account hijacking on a shared computer. Mitigation Mitigation for this issu...

Siemens Mendix SAML Account Hijacking Vulnerability

Siemens Mendix SAML is an authentication module provided by the Siemens Mendix platform for single sign-on SSO functionality. An account hijacking vulnerability exists in Siemens Mendix SAML, which stems from insufficient signature verification and binding checks, and can be exploited by an...

Siemens Mendix SAML 数据伪造问题漏洞

Siemens Mendix SAML is an authentication module provided by the Siemens Mendix platform for single sign-on SSO functionality. An account hijacking vulnerability exists in Siemens Mendix SAML, which stems from insufficient signature verification and binding checks, and can be exploited by an...

CVE-2025-7695

CVE-2025-7695 – Dataverse Integration (WordPress) : The Dataverse Integration plugin versions 2.77–2.81 are vulnerable to privilege escalation via the reset_password_link REST endpoint. The handler accepts a client-supplied id, email, or login and calls get_password_reset_key() after only validat...