EUVD-2024-1110

Malicious code in bioql PyPI...

EUVD-2025-10696

Malicious code in bioql PyPI...

EUVD-2025-22038

Malicious code in bioql PyPI...

EUVD-2025-12608

Malicious code in bioql PyPI...

EUVD-2024-39163

Malicious code in bioql PyPI...

EUVD-2021-32220

Malicious code in bioql PyPI...

EUVD-2023-3097

Malicious code in bioql PyPI...

EUVD-2025-29306

Malicious code in bioql PyPI...

EUVD-2021-6693

Malicious code in bioql PyPI...

EUVD-2021-7170

Malicious code in bioql PyPI...

CVE-2025-10217

A vulnerability exists in Asset Suite for an authenticated user to manipulate the content of performance related log data or to inject crafted data in logfile for potentially carrying out further malicious attacks. Performance logging is typically enabled for troubleshooting purposes while...

Race condition in xterm allows local users to modify arbitrary files via the logging option.

...

Important: Red Hat Security Advisory: Logging for Red Hat OpenShift - 5.8.22

Logging for Red Hat OpenShift - 5.8.22 Red Hat OpenShift Logging 5.8.22 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs...

CVE-2025-10217

A vulnerability exists in Asset Suite for an authenticated user to manipulate the content of performance related log data or to inject crafted data in logfile for potentially carrying out further malicious attacks. Performance logging is typically enabled for troubleshooting purposes while...

PT-2025-39981

Name of the Vulnerable Software and Affected Versions Asset Suite affected versions not specified Description An authenticated user can manipulate performance-related log data or inject crafted data into logfiles. This could potentially enable further malicious attacks. Performance logging is...

curl: AWS SigV4 Signature Disclosure via Verbose Logging in libcurl

Summary When libcurl is built with AWS SigV4 support, enabling verbose logging CURLOPTVERBOSE or --verbose causes the library to print both the string-to-sign and the final HMAC signature into logs. Because signatures remain valid for several minutes and are derived directly from AWS credentials,...

MAL-2025-47743 Malicious code in winstem-logging (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in winstem-logging (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-10745

The Banhammer – Monitor Site Traffic, Block Bad Users and Bots plugin for WordPress is vulnerable to Blocking Bypass in all versions up to, and including, 3.4.8. This is due to a site-wide “secret key” being deterministically generated from a constant character set using md5 and base64encode and...

CVE-2025-10377

The System Dashboard plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8.20. This is due to missing nonce validation on the sdtogglelogs function. This makes it possible for unauthenticated attackers to toggle critical logging settings...