EUVD-2024-39615

Malicious code in bioql PyPI...

EUVD-2022-26984

Malicious code in bioql PyPI...

EUVD-2023-28503

Malicious code in bioql PyPI...

EUVD-2025-20748

Malicious code in bioql PyPI...

EUVD-2024-47295

Malicious code in bioql PyPI...

EUVD-2024-27014

Malicious code in bioql PyPI...

EUVD-2022-32004

Malicious code in bioql PyPI...

EUVD-2024-47404

Malicious code in bioql PyPI...

Scattered Spider Resurfaces With Financial Sector Attacks Despite Retirement Claims

Cybersecurity researchers have tied a fresh round of cyber attacks targeting financial services to the notorious cybercrime group known as Scattered Spider, casting doubt on their claims of going "dark." Threat intelligence firm ReliaQuest said it has observed indications that the threat actor ha...

Scattered Spider Resurfaces With Financial Sector Attacks Despite Retirement Claims

Cybersecurity researchers have tied a fresh round of cyber attacks targeting financial services to the notorious cybercrime group known as Scattered Spider, casting doubt on their claims of going "dark." Threat intelligence firm ReliaQuest said it has observed indications that the threat actor ha...

Citrix XenServer Multiple Vulnerabilities (XSA-472)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by multiple vulnerabilities: - A NULL pointer dereference in the updating of the reference TSC area. CVE-2025-27466 - A NULL pointer dereference by assuming the SIM page is mapped when a...

Threat Actors Weaponize HexStrike AI to Exploit Citrix Flaws Within a Week of Disclosure

Threat actors are attempting to leverage a newly released artificial intelligence AI offensive security tool called HexStrike AI to exploit recently disclosed security flaws. HexStrike AI, according to its website, is pitched as an AI‑driven security platform to automate reconnaissance and...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Citrix Netscaler_Application_Delivery_Controller

CVE-2025-7775 Memory overflow vulnerability leading to Remote...

CISA Adds Citrix and Git Flaws to KEV Catalogue Amid Active Exploitation

CISA has added three actively exploited vulnerabilities in Citrix and Git to its KEV Catalogue. Federal agencies must…...

Citrix Session Recording deserialization vulnerability

Added: 08/27/2025 CVE: CVE-2024-8069 Background Citrix Session Recording is software for recording and archiving sessions for retrieval and playback. Problem Unsafe object deserialization in Citrix Session Recording could allow a remote attacker to execute arbitrary commands by sending a speciall...

Citrix Session Recording deserialization vulnerability

Added: 08/27/2025 CVE: CVE-2024-8069 Background Citrix Session Recording is software for recording and archiving sessions for retrieval and playback. Problem Unsafe object deserialization in Citrix Session Recording could allow a remote attacker to execute arbitrary commands by sending a speciall...

Citrix Workspace App Privilege Escalation

The vulnerability of the Citrix Workspace App for Windows relates to insecure management of privileges. Exploiting this vulnerability could allow an attacker to elevate their privileges to the SYSTEM level...

Citrix Virtual Apps and Desktops Privilege Escalation

The vulnerability of the Virtual Delivery Agent component of the Citrix Virtual Apps and Desktops CVAD virtualization and delivery software formerly XenApp and XenDesktop is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileg...

Citrix Secure Access Client Privilege Escalation

The vulnerability of the Citrix Secure Access Client software for secure remote access on the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

Vulnerabilities fixed in Citrix NetScaler ADC and Gateway

Citrix has fixed vulnerabilities in the NetScaler ADC and Gateway The vulnerabilities are related to memory overflow and improper access control configurations. Malicious parties can exploit the vulnerabilities to cause a Denial-of-Service and potentially execute arbitrary code on the vulnerable...