EUVD-2025-6178

Malicious code in bioql PyPI...

EUVD-2023-56107

Malicious code in bioql PyPI...

EUVD-2025-11110

Malicious code in bioql PyPI...

EUVD-2023-51259

Malicious code in bioql PyPI...

EUVD-2022-1089

Malicious code in bioql PyPI...

EUVD-2025-16201

Malicious code in bioql PyPI...

EUVD-2024-33359

Malicious code in bioql PyPI...

EUVD-2023-55110

Malicious code in bioql PyPI...

EUVD-2025-8084

Malicious code in bioql PyPI...

EUVD-2022-24570

Malicious code in bioql PyPI...

CVE-2025-47210

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.2...

CVE-2025-44011 Qsync Central

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.1...

Incorrect User Management

Overview thorsten/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to Incorrect User Management due to allowing multiple accounts connected to the same email address. An attacker can cause account ambiguity by registering...

CVE-2024-58260 Rancher update on users can deny the service to the admin

A vulnerability has been identified within Rancher Manager where a missing server-side validation on the .username field in Rancher can allow users with update permissions on other User resources to cause denial of access for targeted accounts...

CVE-2024-58260 Rancher update on users can deny the service to the admin

A vulnerability has been identified within Rancher Manager where a missing server-side validation on the .username field in Rancher can allow users with update permissions on other User resources to cause denial of access for targeted accounts...

Google Mandiant Probes New Oracle Extortion Wave Possibly Linked to Cl0p Ransomware

Google Mandiant and Google Threat Intelligence Group GTIG have disclosed that they are tracking a new cluster of activity possibly linked to a financially motivated threat actor known as Cl0p. The malicious activity involves sending extortion emails to executives at various organizations and...

AS/400 Telnet 5250 terminal emulation clients, as implemented by (1) IBM client access, (2) Bosanova, (3) PowerTerm, (4) Mochasoft, and possibly other emulations, allows malicious AS/400 servers to execute arbitrary commands via a STRPCO (Start PC Organizer) command followed by STRPCCMD (Start PC command), as demonstrated by creating a backdoor account using REXEC.

...

CVE-2025-10538

An authentication bypass vulnerability exists in LG Innotek camera models LND7210 and LNV7210R. The vulnerability allows a malicious actor to gain access to camera information including user account information...

CVE-2025-10538

CVE-2025-10538 affects LG Innotek camera models LND7210 and LNV7210R. The root cause is an authentication bypass that lets an attacker access camera information, including user account details. Public disclosures across NVD, Red Hat, CNNVD, and CISA confirm the vulnerability, with CVSS v4 base sc...

CVE-2025-10538 Authentication Bypass in LG Innotek Camera

An authentication bypass vulnerability exists in LG Innotek camera models LND7210 and LNV7210R. The vulnerability allows a malicious actor to gain access to camera information including user account information...