EUVD-2024-16596

Malicious code in bioql PyPI...

EUVD-2023-23510

Malicious code in bioql PyPI...

EUVD-2022-52164

Malicious code in bioql PyPI...

EUVD-2025-9510

Malicious code in bioql PyPI...

EUVD-2022-15324

Malicious code in bioql PyPI...

EUVD-2021-8607

Malicious code in bioql PyPI...

EUVD-2022-51545

Malicious code in bioql PyPI...

EUVD-2022-30941

Malicious code in bioql PyPI...

EUVD-2023-34186

Malicious code in bioql PyPI...

EUVD-2021-8606

Malicious code in bioql PyPI...

EUVD-2024-49472

Malicious code in bioql PyPI...

EUVD-2025-8922

Malicious code in bioql PyPI...

EUVD-2021-8568

Malicious code in bioql PyPI...

EUVD-2021-33949

Malicious code in bioql PyPI...

EUVD-2022-15323

Malicious code in bioql PyPI...

EUVD-2022-15480

Malicious code in bioql PyPI...

EUVD-2022-15859

Malicious code in bioql PyPI...

CVE-2025-59948 FreshRSS is vulnerable to XSS due to lack of CSP on HTML query page

FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below do not sanitize certain event handler attributes in feed content, so by finding a page that renders feed entries without CSP, it is possible to execute an XSS payload. The Allow API access authentication setting needs to ...

Brave Desktop 1.82.161 Security Fixes

Disabled "navigator.share" in Tor windows on macOS as reported on HackerOne by cinzinga. - Treat ".onion" hostnames as secure for insecure form warnings and autofill as reported on HackerOne by newfunction. - Prevent tab modal dialogs being shown from inactive split tab as reported on HackerOne...

Passwords and FIDO2 Are Meant to Be Secret: a Practical Secure Authentication Channel for Web Browsers

Password managers provide significant security benefits to users. However, malicious client-side scripts and browser extensions can steal passwords after the manager has autofilled them into the web page. In this paper, we extend prior work by Stock and Johns, showing how password autofill can be...