EUVD-2021-28349

Malicious code in bioql PyPI...

EUVD-2023-27424

Malicious code in bioql PyPI...

EUVD-2022-47048

Malicious code in bioql PyPI...

EUVD-2024-53750

Malicious code in bioql PyPI...

EUVD-2023-38230

Malicious code in bioql PyPI...

EUVD-2023-39723

Malicious code in bioql PyPI...

EUVD-2023-49532

Malicious code in bioql PyPI...

EUVD-2024-43235

Malicious code in bioql PyPI...

EUVD-2022-52076

Malicious code in bioql PyPI...

EUVD-2025-12500

Malicious code in bioql PyPI...

EUVD-2025-5041

Malicious code in bioql PyPI...

EUVD-2025-30255

Malicious code in bioql PyPI...

EUVD-2022-34270

Malicious code in bioql PyPI...

EUVD-2024-24405

Malicious code in bioql PyPI...

CVE-2025-10609 Hardcoded Credentials in Logo Software's TigerWings ERP

Use of Hard-coded Credentials vulnerability in Logo Software Inc. TigerWings ERP allows Read Sensitive Constants Within an Executable. This issue affects TigerWings ERP: from 01.01.00 before 3.03.00...

CVE-2025-10609

CVE-2025-10609 describes a Use of Hard-coded Credentials in Logo Software Inc. TigerWings ERP. Affected versions are 01.01.00 through 3.02.99; the vulnerability enables reading of sensitive constants within the executable due to hard-coded credentials. Public documents indicate remediation by upg...

CVE-2025-10609 Hardcoded Credentials in Logo Software's TigerWings ERP

Use of Hard-coded Credentials vulnerability in Logo Software Inc. TigerWings ERP allows Read Sensitive Constants Within an Executable. This issue affects TigerWings ERP: from 01.01.00 before 3.03.00...

CVE-2025-34209: Use of Hard-coded Credentials

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to 22.0.862 and Application prior to 20.0.2014 VA and SaaS deployments contain Docker images with the private GPG key and passphrase for the account no‑reply+virtual‑[email protected]. The key is stored in cleartext and the...

CVE-2025-34196: Use of Hard-coded Credentials

Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 25.1.102 and Application prior to 25.1.1413 Windows client deployments contain a hardcoded private key for the PrinterLogic Certificate Authority CA and a hardcoded password in product configuration files. The Windows...

AI-Powered App Exposes User Data, Creates Risk of Supply Chain Attacks

Trend™ Research’s analysis of Wondershare RepairIt reveals how the AI-driven app exposed sensitive user data due to unsecure cloud storage practices and hardcoded credentials, creating risks of model tampering and supply chain attacks...