262 matches found
EUVD-2025-12296
Malicious code in bioql PyPI...
EUVD-2022-40738
Malicious code in bioql PyPI...
EUVD-2023-29025
Malicious code in bioql PyPI...
EUVD-2022-48079
Malicious code in bioql PyPI...
EUVD-2025-23340
Malicious code in bioql PyPI...
EUVD-2022-4533
Malicious code in bioql PyPI...
EUVD-2022-4013
Malicious code in bioql PyPI...
EUVD-2023-12449
Malicious code in bioql PyPI...
EUVD-2021-6802
Malicious code in bioql PyPI...
EUVD-2025-6071
Malicious code in bioql PyPI...
EUVD-2024-34290
Malicious code in bioql PyPI...
EUVD-2024-47884
Malicious code in bioql PyPI...
EUVD-2023-59084
Malicious code in bioql PyPI...
BIT-MONGODB-2025-3085 MongoDB Server running on Linux may allow unexpected connections where intermediate certificates are revoked
A MongoDB server under specific conditions running on Linux with TLS and CRL revocation status checking enabled, fails to check the revocation status of the intermediate certificates in the peer's certificate chain. In cases of MONGODB-X509, which is not enabled by default, this may lead to...
CVE-2025-57205
iNiLabs School Express SMS Express 6.2 is affected by a Stored Cross-Site Scripting XSS vulnerability in the content-management features available to authenticated admin users. The vulnerability resides in POSTed editor parameters submitted to the /posts/edit/id endpoint and similarly in Notice a...
CVE-2025-34188
Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 1.0.735 and Application prior to 20.0.1330 macOS/Linux client deployments contain a vulnerability in the local logging mechanism. Authentication session tokens, including PHPSESSID, XSRF-TOKEN, and laravelsession, are...
Linux Distros Unpatched Vulnerability : CVE-2025-3085
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A MongoDB server under specific conditions running on Linux with TLS and CRL revocation status checking enabled, fails to check the revocation status of the...
PT-2025-36915
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The software uses hard-coded credentials. This practice introduces a significant security risk, as these credentials, if exposed, could allow unauthorized...
Fides has a Lack of Brute-Force Protections on Authentication Endpoints
Summary The Fides Admin UI login endpoint relies on a general IP-based rate limit for all API traffic and lacks specific anti-automation controls designed to protect against brute-force attacks. This could allow attackers to conduct credential testing attacks, such as credential stuffing or...
Linux Distros Unpatched Vulnerability : CVE-2022-3786
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain...