EUVD-2025-5402

Malicious code in bioql PyPI...

EUVD-2022-50269

Malicious code in bioql PyPI...

EUVD-2022-25204

Malicious code in bioql PyPI...

EUVD-2024-40035

Malicious code in bioql PyPI...

EUVD-2022-51874

Malicious code in bioql PyPI...

EUVD-2024-2405

Malicious code in bioql PyPI...

EUVD-2021-7087

Malicious code in bioql PyPI...

EUVD-2025-13666

Malicious code in bioql PyPI...

EUVD-2023-12820

Malicious code in bioql PyPI...

EUVD-2024-41747

Malicious code in bioql PyPI...

EUVD-2024-25244

Malicious code in bioql PyPI...

EUVD-2025-18399

Malicious code in bioql PyPI...

EUVD-2022-39077

Malicious code in bioql PyPI...

EUVD-2022-34787

Malicious code in bioql PyPI...

EUVD-2022-51871

Malicious code in bioql PyPI...

Microsoft 365 Direct Send Abuse

The Rapid7 MDR team has observed a significant rise in the number of threat actors leveraging a lesser-known feature within Microsoft 365 called Direct Send. Rapid7 encourages organizations to immediately review their authenticated mail flow configurations, specifically related to Microsoft 365...

ReconPi

This is a reconnaissance tool called ReconPi, designed for use on a Raspberry Pi or a VPS. The tool is written in Bash and uses various scripts to perform extensive reconnaissance on a target domain. The tool's primary function is to gather information about a target domain, including subdomains,...

Reverse Proxy Header - Less critical - Access bypass - SA-CONTRIB-2025-111

This module allows you to specify an HTTP header name to determine the client's IP address. The module doesn't sufficiently handle all cases under the scenario if Drupal Core settings $settings'reverseproxy' is set to TRUE and $settings'reverseproxyaddresses' is configured. This vulnerability...

CVE-2025-42907

CVE-2025-42907 concerns SAP BI Platform. Multiple connected sources confirm a vulnerability where an attacker can modify the IP address in the LogonToken attached to OpenDoc, and when the modified link is opened in a browser, a different server could receive a ping request. The impact is describe...

CVE-2025-42907 Server-Side Request Forgery in SAP BI Platform

SAP BI Platform allows an attacker to modify the IP address of the LogonToken for the OpenDoc. On accessing the modified link in the browser a different server could get the ping request. This has low impact on integrity with no impact on confidentiality and availability of the system...