EUVD-2022-3611

Malicious code in bioql PyPI...

EUVD-2022-7363

Malicious code in bioql PyPI...

EUVD-2022-3560

Malicious code in bioql PyPI...

EUVD-2022-4471

Malicious code in bioql PyPI...

EUVD-2022-1497

Malicious code in bioql PyPI...

EUVD-2023-49877

Malicious code in bioql PyPI...

EUVD-2024-2970

Malicious code in bioql PyPI...

EUVD-2024-2225

Malicious code in bioql PyPI...

EUVD-2025-29734

Malicious code in bioql PyPI...

EUVD-2023-2844

Malicious code in bioql PyPI...

EUVD-2024-0995

Malicious code in bioql PyPI...

CVE-2025-35434

CISA Thorium does not validate TLS certificates when connecting to Elasticsearch. An unauthenticated attacker with access to a Thorium cluster could impersonate the Elasticsearch service. Fixed in 1.1.2...

CVE-2025-35434

CISA Thorium does not validate TLS certificates when connecting to Elasticsearch. An unauthenticated attacker with access to a Thorium cluster could impersonate the Elasticsearch service. Fixed in 1.1.2...

CVE-2025-35434

CVE-2025-35434 : CISA Thorium does not validate TLS certificates when connecting to Elasticsearch, allowing an unauthenticated attacker with access to a Thorium cluster to impersonate the Elasticsearch service. This is described as a vulnerability in Thorium that could enable man-in-the-middle-st...

CVE-2025-35434 CISA Thorium does not validate TLS connections to Elasticsearch

CISA Thorium does not validate TLS certificates when connecting to Elasticsearch. An unauthenticated attacker with access to a Thorium cluster could impersonate the Elasticsearch service. Fixed in 1.1.2...

CVE-2025-35434 CISA Thorium does not validate TLS connections to Elasticsearch

CISA Thorium does not validate TLS certificates when connecting to Elasticsearch. An unauthenticated attacker with access to a Thorium cluster could impersonate the Elasticsearch service. Fixed in 1.1.2...

CVE-2025-35434 CISA Thorium does not validate TLS connections to Elasticsearch

CISA Thorium does not validate TLS certificates when connecting to Elasticsearch. An unauthenticated attacker with access to a Thorium cluster could impersonate the Elasticsearch service. Fixed in 1.1.2...

PT-2025-38233

Name of the Vulnerable Software and Affected Versions: CISA Thorium versions prior to 1.1.2 Description: CISA Thorium does not validate TLS certificates when connecting to Elasticsearch. This allows an unauthenticated attacker with access to a Thorium cluster to impersonate the Elasticsearch...

CISA Thorium 安全漏洞

CISA Thorium is a highly scalable distributed malware analysis and data generation framework from the U.S. Cybersecurity and Infrastructure Security Administration CISA government division. A security vulnerability exists in CISA Thorium versions prior to 1.1.2 that stems from unvalidated TLS...

When AI chatbots leak and how it happens

In a recent article on Cybernews there were two clear signs of how fast the world of AI chatbots is growing. A company I had never even heard of had over 150 million app downloads across its portfolio, and it also had an exposed unprotected Elasticsearch instance. This needs a bit of an...