EUVD-2023-42087

Malicious code in bioql PyPI...

EUVD-2022-1966

Malicious code in bioql PyPI...

EUVD-2025-24151

Malicious code in bioql PyPI...

EUVD-2023-0019

Malicious code in bioql PyPI...

EUVD-2024-31320

Malicious code in bioql PyPI...

EUVD-2025-2884

Malicious code in bioql PyPI...

EUVD-2022-2556

Malicious code in bioql PyPI...

EUVD-2025-22124

Malicious code in bioql PyPI...

EUVD-2024-35290

Malicious code in bioql PyPI...

EUVD-2021-7513

Malicious code in bioql PyPI...

EUVD-2024-54600

Malicious code in bioql PyPI...

EUVD-2023-0024

Malicious code in bioql PyPI...

EUVD-2023-1101

Malicious code in bioql PyPI...

CVE-2025-57430

Creacast Creabox Manager 4.4.4 exposes sensitive configuration data via a publicly accessible endpoint /get. When accessed, this endpoint returns internal configuration including the creacodec.lua file, which contains plaintext admin credentials...

CVE-2025-57430

Creacast Creabox Manager 4.4.4 exposes sensitive configuration data via a publicly accessible endpoint /get. When accessed, this endpoint returns internal configuration including the creacodec.lua file, which contains plaintext admin credentials...

PT-2025-37299

Name of the Vulnerable Software and Affected Versions: Digiever NVR affected versions not specified Description: Digiever NVR devices are susceptible to a sensitive information exposure issue. Unauthenticated remote attackers can access the system configuration file and obtain plaintext credentia...

CVE-2025-58373 Roo Code: Symlink-bypass of .rooignore can lead to unintended file disclosure

Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Versions 3.25.23 and below contain a vulnerability where .rooignore protections could be bypassed using symlinks. This allows an attacker with write access to the workspace to trick the extension into reading files th...

CVE-2025-36729

A non-primary administrator user with admin rights to the web interface but without shell access permissions can display configuration of the device including the master admin password. This vulnerability also allows the user to give themselves shell access with the root gid...

PT-2025-34951 · Nsfocus · Secgate3600

Name of the Vulnerable Software and Affected Versions: SecGate3600 affected versions not specified Description: SecGate3600, a network firewall product developed by NSFOCUS, contains a sensitive information disclosure issue. The vulnerable component fails to enforce authentication checks on POST...

CVE-2010-20109

Barracuda products, confirmed in Spam & Virus Firewall, SSL VPN, and Web Application Firewall versions prior to October 2010, contain a path traversal vulnerability in the viewhelp.cgi endpoint. The locale parameter fails to properly sanitize user input, allowing attackers to inject traversal...