EUVD-2024-42279

Malicious code in bioql PyPI...

EUVD-2024-41456

Malicious code in bioql PyPI...

EUVD-2025-10406

Malicious code in bioql PyPI...

EUVD-2022-4389

Malicious code in bioql PyPI...

EUVD-2023-54193

Malicious code in bioql PyPI...

EUVD-2023-58361

Malicious code in bioql PyPI...

EUVD-2024-42275

Malicious code in bioql PyPI...

EUVD-2024-23041

Malicious code in bioql PyPI...

EUVD-2022-28660

Malicious code in bioql PyPI...

EUVD-2021-30888

Malicious code in bioql PyPI...

EUVD-2025-17313

Malicious code in bioql PyPI...

EUVD-2022-2584

Malicious code in bioql PyPI...

EUVD-2025-20844

Malicious code in bioql PyPI...

EUVD-2021-28602

Malicious code in bioql PyPI...

EUVD-2025-14785

Malicious code in bioql PyPI...

CVE-2025-57174

CVE-2025-57174 covers Siklu EtherHaul EH-8010/ EH-1200 devices (firmware 7.4.0–10.7.3) where the rfpiped service on TCP port 555 uses static, hardcoded AES keys. The keys are identical across devices, enabling an unauthenticated attacker to craft encrypted packets and trigger remote command execu...

PARROT: Portable Android Reproducible Traffic Observation Tool

The rapid evolution of mobile security protocols and limited availability of current datasets constrains research in app traffic analysis. This paper presents PARROT, a reproducible and portable traffic capture system for systematic app traffic collection using Android Virtual Devices. The system...

ECOVACS robot vacuums 安全漏洞

ECOVACS robot vacuums is a line of vacuum cleaners from the Chinese company ECOVACS. A security vulnerability exists in ECOVACS robot vacuums that stems from insecure Wi-Fi communication using predictable AES encryption keys...

CVE-2024-46916

Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR06 contains functionality that allows the removal of critical system files before the filesystem is properly mounted e.g., leveraging a delete call in /etc/rc.d/init.d/mountfs to remove the /etc/fstab file. This can allow code execution and, ...

Coze Studio 安全漏洞

Coze Studio is an AI Agent visualization and development platform open-sourced by Coze Studio. A security vulnerability exists in Coze Studio 0.2.4 and earlier versions, which originates from the use of hard-coded encryption keys for the parameters AuthSecretKey/StateSecretKey/OAuthTokenSecretKey...