CVE-2025-62375

The CVE describes an improper verification in the AWS attestor used by go-witness and witness. In affected versions, the attestor can accept forged AWS EC2 instance identity documents when a signature is absent/empty or RSA verification fails, and it relies on a legacy global AWS certificate inst...

Improper Verification of Cryptographic Signature

Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature when the spark.network.crypto.enabled is true and the cipher is not explicitly configured, resulting in the use of AES in CTR mode without authentication. An attacker can compromise the...

EUVD-2021-23618

Malware in sbrugna...

EUVD-2021-23617

Malware in sbrugna...

EUVD-2021-23574

Malware in sbrugna...

EUVD-2021-23572

Malware in sbrugna...

EUVD-2020-0226

Malware in sbrugna...

EUVD-2017-11341

Malware in sbrugna...

EUVD-2024-15812

Malicious code in bioql PyPI...

EUVD-2024-18568

Malicious code in bioql PyPI...

EUVD-2024-18585

Malicious code in bioql PyPI...

EUVD-2021-9618

Malicious code in bioql PyPI...

EUVD-2025-26509

Malicious code in bioql PyPI...

EUVD-2022-7746

Malicious code in bioql PyPI...

EUVD-2022-31992

Malicious code in bioql PyPI...

EUVD-2025-10081

Malicious code in bioql PyPI...

EUVD-2021-9843

Malicious code in bioql PyPI...

EUVD-2024-42795

Malicious code in bioql PyPI...

EUVD-2022-37373

Malicious code in bioql PyPI...

EUVD-2021-9465

Malicious code in bioql PyPI...