CVE-2025-10678 Admin with default credentials in NetBird VPN

NetBird VPN when installed using vendor's provided script failed to remove or change default password of an admin account created by ZITADEL. This issue affects instances installed using vendor's provided script. This issue may affect instances created with Docker if the default password was not...

EUVD-2025-28745

E3 Site Supervisor firmware version 2.31F01 has a default admin user "ONEDAY" with a daily generated password. An attacker can predictably generate the password for ONEDAY. The oneday user cannot be deleted or modified by any user...

EUVD-2003-0122

Malware in sbrugna...

EUVD-2020-4062

Malware in sbrugna...

EUVD-2018-10108

Malware in sbrugna...

EUVD-2004-2523

Malware in sbrugna...

EUVD-2020-20193

Malware in sbrugna...

EUVD-2020-3366

Malware in sbrugna...

EUVD-2015-4983

Malware in sbrugna...

EUVD-2025-24270

Malicious code in bioql PyPI...

EUVD-2024-44178

Malicious code in bioql PyPI...

EUVD-2024-20299

Malicious code in bioql PyPI...

EUVD-2025-30816

Malicious code in bioql PyPI...

EUVD-2022-49182

Malicious code in bioql PyPI...

EUVD-2025-31638

Malicious code in bioql PyPI...

EUVD-2025-31622

Malicious code in bioql PyPI...

CVE-2025-54591

FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below expose information about feeds and tags of default admin users, due to lack of access checking in the FreshRSSAuth::hasAccess function used by some of the tag/feed related endpoints. FreshRSS controllers usually have a...

CVE-2025-34223

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 VA/SaaS deployments contain a default admin account and an installation‑time endpoint at /admin/query/updatedatabase.php that can be accessed without authentication. An...

CVE-2025-34223

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 VA/SaaS deployments contain a default admin account and an installation‑time endpoint at /admin/query/updatedatabase.php that can be accessed without authentication. An...

CVE-2025-34223

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 VA/SaaS deployments contain a default admin account and an installation‑time endpoint at /admin/query/updatedatabase.php that can be accessed without authentication. An...