EUVD-2024-19483

Malicious code in bioql PyPI...

EUVD-2025-19884

Malicious code in bioql PyPI...

EUVD-2024-19986

Malicious code in bioql PyPI...

EUVD-2023-43672

Malicious code in bioql PyPI...

EUVD-2022-33855

Malicious code in bioql PyPI...

EUVD-2024-54803

Malicious code in bioql PyPI...

EUVD-2022-46032

Malicious code in bioql PyPI...

EUVD-2024-18016

Malicious code in bioql PyPI...

EUVD-2023-47907

Malicious code in bioql PyPI...

EUVD-2023-45859

Malicious code in bioql PyPI...

EUVD-2022-6043

Malicious code in bioql PyPI...

EUVD-2022-48771

Malicious code in bioql PyPI...

EUVD-2022-41588

Malicious code in bioql PyPI...

EUVD-2023-41928

Malicious code in bioql PyPI...

EUVD-2024-17273

Malicious code in bioql PyPI...

PT-2025-39296

Name of the Vulnerable Software and Affected Versions Cisco IOS Software and Cisco IOS XE Software affected versions not specified Description A flaw exists in the implementation of the TACACS+ protocol that may allow a remote attacker to view sensitive data or bypass authentication. The issue...

CVE-2025-54807

The secret used for validating authentication tokens is hardcoded in device firmware for affected versions. An attacker who obtains the signing key can bypass authentication, gaining complete access to the system...

CVE-2025-10127

Daikin Europe N.V Security Gateway is vulnerable to an authorization bypass through a user-controlled key vulnerability that could allow an attacker to bypass authentication. An unauthorized attacker could access the system without prior credentials...

CVE-2025-41702

The JWT secret key is embedded in the egOS WebGUI backend and is readable to the default user. An unauthenticated remote attacker can generate valid HS256 tokens and bypass authentication/authorization due to the use of hard-coded cryptographic key...

CVE-2025-2246 Missing Authorization in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions before 18.1.5, 18.2 before 18.2.5, and 18.3 before 18.3.1 that could have allowed unauthenticated users to access sensitive manual CI/CD variables by querying the GraphQL API...