EUVD-2023-46396

Malicious code in bioql PyPI...

EUVD-2023-28519

Malicious code in bioql PyPI...

EUVD-2023-27424

Malicious code in bioql PyPI...

EUVD-2021-28349

Malicious code in bioql PyPI...

EUVD-2022-42620

Malicious code in bioql PyPI...

EUVD-2025-19746

Malicious code in bioql PyPI...

EUVD-2023-30882

Malicious code in bioql PyPI...

EUVD-2025-18269

Malicious code in bioql PyPI...

EUVD-2025-27566

Malicious code in bioql PyPI...

EUVD-2022-52076

Malicious code in bioql PyPI...

EUVD-2025-5284

Malicious code in bioql PyPI...

EUVD-2023-38230

Malicious code in bioql PyPI...

CVE-2025-10609 Hardcoded Credentials in Logo Software's TigerWings ERP

Use of Hard-coded Credentials vulnerability in Logo Software Inc. TigerWings ERP allows Read Sensitive Constants Within an Executable. This issue affects TigerWings ERP: from 01.01.00 before 3.03.00...

CVE-2025-10609

CVE-2025-10609 describes a Use of Hard-coded Credentials in Logo Software Inc. TigerWings ERP. Affected versions are 01.01.00 through 3.02.99; the vulnerability enables reading of sensitive constants within the executable due to hard-coded credentials. Public documents indicate remediation by upg...

CVE-2025-10609 Hardcoded Credentials in Logo Software's TigerWings ERP

Use of Hard-coded Credentials vulnerability in Logo Software Inc. TigerWings ERP allows Read Sensitive Constants Within an Executable. This issue affects TigerWings ERP: from 01.01.00 before 3.03.00...

CVE-2025-34209: Use of Hard-coded Credentials

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to 22.0.862 and Application prior to 20.0.2014 VA and SaaS deployments contain Docker images with the private GPG key and passphrase for the account no‑reply+virtual‑[email protected]. The key is stored in cleartext and the...

CVE-2025-34196: Use of Hard-coded Credentials

Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 25.1.102 and Application prior to 25.1.1413 Windows client deployments contain a hardcoded private key for the PrinterLogic Certificate Authority CA and a hardcoded password in product configuration files. The Windows...

AI-Powered App Exposes User Data, Creates Risk of Supply Chain Attacks

Trend™ Research’s analysis of Wondershare RepairIt reveals how the AI-driven app exposed sensitive user data due to unsecure cloud storage practices and hardcoded credentials, creating risks of model tampering and supply chain attacks...

CVE-2025-57601

AiKaan Cloud Controller uses a single hardcoded SSH private key and the username proxyuser for remote terminal access to all managed IoT/edge devices. When an administrator initiates "Open Remote Terminal" from the AiKaan dashboard, the controller sends this same static private key to the target...

WordPress plugin Estonian Shipping Methods for WooCommerce 信任管理问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plug...