EUVD-2025-17814

Malicious code in bioql PyPI...

EUVD-2025-17684

Malicious code in bioql PyPI...

EUVD-2024-2376

Malicious code in bioql PyPI...

EUVD-2024-0890

Malicious code in bioql PyPI...

EUVD-2024-3529

Malicious code in bioql PyPI...

EUVD-2023-32130

Malicious code in bioql PyPI...

EUVD-2023-58069

Malicious code in bioql PyPI...

EUVD-2025-17669

Malicious code in bioql PyPI...

EUVD-2024-0875

Malicious code in bioql PyPI...

EUVD-2025-17683

Malicious code in bioql PyPI...

EUVD-2022-3188

Malicious code in bioql PyPI...

EUVD-2024-0864

Malicious code in bioql PyPI...

EUVD-2024-0920

Malicious code in bioql PyPI...

EUVD-2024-0889

Malicious code in bioql PyPI...

EUVD-2022-1623

Malicious code in bioql PyPI...

EUVD-2025-17687

Malicious code in bioql PyPI...

CISA Releases Advisory on Lessons Learned from an Incident Response Engagement

Today, CISA released a cybersecurity advisory detailing lessons learned from an incident response engagement following the detection of potential malicious activity identified through security alerts generated by the agency’s endpoint detection and response tool. This advisory, CISA Shares Lesson...

TestWfsPost Component Unauthorized Access

The vulnerability of the TestWfsPost component in the software for administrative and publishing operations on the OSGeo GeoServer server is related to insufficient testing of requests on the server side. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...

GeoServer WFS Disclosure

The vulnerability in the GeoServer Web Feature Service WFS software, used for managing and publishing geospatial data on the OSGeo GeoServer server, is related to an incorrect limitation on XML links to external objects. Exploiting this vulnerability could allow a malicious actor to disclose...

OSGeo GeoServer PreventLocalEntityResolver Unauthorized Access

The vulnerability of the PreventLocalEntityResolver class in the software for administrative and publishing of geodata on the OSGeo GeoServer server is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow an attacker, operating remotely, to...