EUVD-2023-44875

Malicious code in bioql PyPI...

EUVD-2025-20179

Malicious code in bioql PyPI...

EUVD-2023-2662

Malicious code in bioql PyPI...

EUVD-2025-29083

Malicious code in bioql PyPI...

EUVD-2022-0936

Malicious code in bioql PyPI...

EUVD-2022-0505

Malicious code in bioql PyPI...

EUVD-2023-29476

Malicious code in bioql PyPI...

EUVD-2024-22527

Malicious code in bioql PyPI...

PT-2025-40540

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions 4.0-nightly-2025-10-03 and below Description phpMyFAQ does not enforce uniqueness of email addresses during user registration, allowing multiple distinct accounts to be created with the same email. This can cause account...

CVE-2025-41064

Incorrect authentication vulnerability in OpenSIAC, which could allow an attacker to impersonate a person using Cl@ve as an authentication method...

PT-2025-40341

Name of the Vulnerable Software and Affected Versions OpenSIAC affected versions not specified Description An incorrect authentication issue exists in OpenSIAC that could allow an attacker to impersonate a person using Cl@ve as an authentication method. The issue enables full Cl@ve identity...

OESA-2025-2334 cups security update

CUPS is the standards-based, open source printing system developed by Apple Inc. for UNIX®-like operating systems. CUPS uses the Internet Printing Protocol IPP to support printing to local and network printers. Security Fixes: 'Hi all,\n\nthere is important security vulnerability in...

Rancher CLI SAML authentication is vulnerable to phishing attacks

Impact A vulnerability has been identified within Rancher Manager whereby the SAML authentication from the Rancher CLI tool is vulnerable to phishing attacks. The custom authentication protocol for SAML-based providers can be abused to steal Rancher’s authentication tokens. Rancher Manager...

Liferay DXP 安全漏洞

Liferay DXP is a suite of digital experience collaboration platforms from Liferay USA. A security vulnerability exists in Liferay DXP that stems from a one-time password that is reusable within its validity period, which could lead to an attacker exploiting a user's one-time password for...

Exploit for Improper Verification of Cryptographic Signature in Pysaml2_Project Pysaml2

Technical Report on CVE-2021-21239: Redash SAML Authentication...

CVE-2025-59036 Infrahub allows authentication with deleted and expired API tokens

Infrahub offers a central hub to manage data, templates, and playbooks. Prior to versiond 1.3.9 and 1.4.5, a bug in the authentication logic will cause API tokens that were deleted and/or expired to be considered valid. This means that any API token that is associated with an active user account...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure in the authentication process. An attacker can obtain sensitive internal error information by submitting a login attempt with a deleted client secret. Remediation A fix was pushed into the master branch but not yet...

K7 Security Anti-Malware suite 安全漏洞

K7 Security Anti-Malware suite is a comprehensive security protection software from K7 Security India. A security vulnerability exists in K7 Security Anti-Malware suite version 23.0.0.10, which stems from insufficient caller authentication and could lead to a denial of service attack...

OpsMill Infrahub 安全漏洞

OpsMill Infrahub is an infrastructure resource management platform from the French company OpsMill. A security vulnerability exists in OpsMill Infrahub versions prior to 1.3.9 and prior to 1.4.5, which stems from an error in the authentication logic that could cause deleted or expired API tokens ...

CVE-2025-52543

CVE-2025-52543 affects E3 Site Supervisor Control (firmware versions prior to 2.31F01) and its application services MGW/RCI. The root cause is use of client-side hashing for authentication, enabling an attacker to authenticate by obtaining only a password hash. Public references consistently desc...