EUVD-2012-0823

Malware in sbrugna...

EUVD-2021-27114

Malware in sbrugna...

EUVD-2008-1529

Malware in sbrugna...

EUVD-2002-0660

Malware in sbrugna...

EUVD-2015-2092

Malware in sbrugna...

EUVD-2012-3438

Malware in sbrugna...

EUVD-2019-2157

Malware in sbrugna...

EUVD-2023-58152

Malicious code in bioql PyPI...

EUVD-2023-2367

Malicious code in bioql PyPI...

EUVD-2022-6846

Malicious code in bioql PyPI...

EUVD-2022-38119

Malicious code in bioql PyPI...

EUVD-2023-1947

Malicious code in bioql PyPI...

EUVD-2022-4730

Malicious code in bioql PyPI...

EUVD-2023-1200

Malicious code in bioql PyPI...

EUVD-2022-6774

Malicious code in bioql PyPI...

CVE-2025-48707

An issue was discovered in Stormshield Network Security SNS before 5.0.1. TPM authentication information could, in some HA use cases, be shared among administrators, which can cause secret sharing...

Timing Attack

Overview Affected versions of this package are vulnerable to Timing Attack via the Proxy authentication. An attacker can obtain sensitive authentication information by exploiting differences in response times during password validation. Remediation Upgrade d7y.io/dragonfly/v2/client/daemon/proxy ...

Plex users: Reset your password!

Media streaming platform Plex has warned customers about a data breach, advising them to reset their password. Plex said an attacker broke into one of its databases, allowing them to access a "limited subset" of customer data. This included email addresses, usernames, hashed passwords, and...

CVE-2025-6737

Securden Unified PAM Remote Vendor Gateway is affected by CVE-2025-6737. The vulnerability stems from shared infrastructure and access tokens across multiple tenants, enabling a malicious actor to obtain authentication material and access the gateway server with low-privilege permissions. Public ...

CVE-2025-55008 AuthKit React Router: Sensitive auth data rendered in HTML

The AuthKit library for React Router 7+ provides helpers for authentication and session management using WorkOS & AuthKit with React Router. In versions 0.6.1 and below, @workos-inc/authkit-react-router exposed sensitive authentication artifacts — specifically sealedSession and accessToken by...