EUVD-2012-6425

Malware in sbrugna...

EUVD-2011-5026

Malware in sbrugna...

EUVD-2024-43791

Malicious code in bioql PyPI...

EUVD-2023-26778

Malicious code in bioql PyPI...

EUVD-2025-4864

Malicious code in bioql PyPI...

EUVD-2024-19814

Malicious code in bioql PyPI...

EUVD-2024-54683

Malicious code in bioql PyPI...

EUVD-2023-49438

Malicious code in bioql PyPI...

EUVD-2022-46917

Malicious code in bioql PyPI...

EUVD-2022-34056

Malicious code in bioql PyPI...

EUVD-2022-44209

Malicious code in bioql PyPI...

EUVD-2022-36207

Malicious code in bioql PyPI...

CVE-2025-53632 Chall-Manager's scenario decoding process does not check for zip slips

Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player. When decoding a scenario i.e. a zip archive, the path of the file to write is not checked, potentially leading to zip slips. Exploitation does not require authentication nor authorization, so anyone can...

CVE-2025-27449

The MEAC300-FNADE4 does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it susceptible to brute-force attacks...

CVE-2025-27456

CVE-2025-27456 is described as a brute-force vulnerability in the SMB server login. Connected documents confirm concrete details for Endress+Hauser MEAC300-FNADE4 (accessible via Ethernet) with multiple reports noting the login mechanism allows rapid failed attempts; some entries cite no public f...

CVE-2025-1710 CVE-2025-1710

The maxView Storage Manager does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it susceptible to brute-force attacks...

CVE-2025-52101

linjiashop =0.9 is vulnerable to Incorrect Access Control. When using the default-generated JWT authentication, attackers can bypass the authentication and retrieve the encrypted "password" and "salt". The password can then be obtained through brute-force cracking...

File Browser vulnerable to insecure password handling

Summary All user accounts authenticate towards a File Browser instance with a password. A missing password policy and brute-force protection makes it impossible for administrators to properly secure the authentication process. Impact Attackers can mount a brute-force attack against the passwords ...

CVE-2025-49186

The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it susceptible to brute-force attacks...

CVE-2025-48746

Netwrix Directory Manager formerly Imanami GroupID v.11.0.0.0 and before, as well as after v.11.1.25134.03 lacks Authentication for a Critical Function...