EUVD-2018-0113

Malware in sbrugna...

EUVD-2021-1390

Malware in sbrugna...

EUVD-2021-28530

Malicious code in bioql PyPI...

EUVD-2022-49453

Malicious code in bioql PyPI...

EUVD-2024-2681

Malicious code in bioql PyPI...

EUVD-2025-11315

Malicious code in bioql PyPI...

EUVD-2024-52979

Malicious code in bioql PyPI...

EUVD-2023-28084

Malicious code in bioql PyPI...

EUVD-2024-17345

Malicious code in bioql PyPI...

EUVD-2023-55603

Malicious code in bioql PyPI...

EUVD-2022-28445

Malicious code in bioql PyPI...

EUVD-2023-56203

Malicious code in bioql PyPI...

EUVD-2021-30369

Malicious code in bioql PyPI...

EUVD-2025-1817

Malicious code in bioql PyPI...

EUVD-2022-1334

Malicious code in bioql PyPI...

CVE-2025-57815 Fides Lacks Brute-Force Protections on Authentication Endpoints

Fides is an open-source privacy engineering platform. Prior to version 2.69.1, the Fides Admin UI login endpoint relies on a general IP-based rate limit for all API traffic and lacks specific anti-automation controls designed to protect against brute-force attacks. This could allow attackers to...

DRUPAL-CONTRIB-2025-098

This module allows users to setup two-factor authentication 2FA using authenticator apps for enhanced login security. The module did not protect all possible login paths provided by core modules. CVSS risk score experimental 6.3 / Medium...

PT-2025-31680 · Hashicorp · Vault +1

Name of the Vulnerable Software and Affected Versions: Vault versions prior to 1.20.1 Vault Enterprise versions prior to 1.20.1, 1.19.7, 1.18.12, and 1.16.23 Description: Vault and Vault Enterprise’s login MFA rate limits could be bypassed, and TOTP tokens could be reused. Recommendations: Update...

CVE-2025-6895 MelaPress Login Security 2.1.0 - 2.1.1 - Authentication Bypass to Privilege Escalation via get_valid_user_based_on_token Function

The Melapress Login Security plugin for WordPress is vulnerable to Authentication Bypass due to missing authorization within the getvaliduserbasedontoken function in versions 2.1.0 to 2.1.1. This makes it possible for unauthenticated attackers who know an arbitrary user meta value to bypass...

CVE-2025-6895

CVE-2025-6895 — Melapress Login Security (WordPress) is an authentication bypass vulnerability in versions 2.1.0–2.1.1. The flaw occurs in get_valid_user_based_on_token(), allowing unauthenticated attackers who know a user meta value to bypass login checks and log in as that user. Multiple connec...