EUVD-2022-5564

Malicious code in bioql PyPI...

EUVD-2024-49313

Malicious code in bioql PyPI...

EUVD-2023-2484

Malicious code in bioql PyPI...

EUVD-2022-5389

Malicious code in bioql PyPI...

EUVD-2025-0193

Malicious code in bioql PyPI...

EUVD-2022-5176

Malicious code in bioql PyPI...

EUVD-2022-5090

Malicious code in bioql PyPI...

EUVD-2022-3767

Malicious code in bioql PyPI...

EUVD-2022-3796

Malicious code in bioql PyPI...

EUVD-2022-2736

Malicious code in bioql PyPI...

EUVD-2024-2695

Malicious code in bioql PyPI...

EUVD-2022-5446

Malicious code in bioql PyPI...

WSO2's Input Validation Management Service contains Observable Discrepancy when Multi-Attribute Login is enabled

A username enumeration vulnerability exists in multiple WSO2 products when Multi-Attribute Login is enabled. In this configuration, the system returns a distinct "User does not exist" error message to the login form, regardless of the validateusername setting. This behavior allows malicious actor...

GHSA-W82P-R9VW-4RG5 WSO2's Input Validation Management Service contains Observable Discrepancy when Multi-Attribute Login is enabled

A username enumeration vulnerability exists in multiple WSO2 products when Multi-Attribute Login is enabled. In this configuration, the system returns a distinct "User does not exist" error message to the login form, regardless of the validateusername setting. This behavior allows malicious actor...

org.webjars.npm:angular-translate-interpolation-messageformat (>=2.15.2, <=2.19.1) potentially affected by CVE-2025-57349 via org.webjars.npm:messageformat (1.0.2)

org.webjars.npm:messageformat MAVEN version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:messageformat and may be impacted: - org.webjars.npm:angular-translate-interpolation-messageformat =2.15.2, =2.19.1 Source cves:...

marshalsec

It is an offensive tool for Java deserialization vulnerabilities. The repository contains a Java tool called "marshalsec" that exploits Java object deserialization vulnerabilities, allowing for remote code execution. The tool includes payload generators for various Java serialization libraries,...

com.liferay:com.liferay.my.account.web (>=1.0.0, <=1.0.12), com.liferay:com.liferay.portal.settings.web (>=1.0.0, <=1.2.4) potentially affected by CVE-2025-43787 via com.liferay:com.liferay.users.admin.web (>=1.0.0, <=2.3.0)

com.liferay:com.liferay.users.admin.web MAVEN version =1.0.0, =1.0.0, =1.0.0, =1.2.4 Source cves: CVE-2025-43787 Source advisory: SNYK:JAVA-COMLIFERAY-12704859...

Spring Authorization Server moving to Spring Security 7.0

Spring Authorization Server has come a long way since 1.0 was officially released in November 2022. Starting as a project separate from Spring Security, has allowed it to iterate quickly on feature development and ultimately grow a rich feature set for building OAuth2 Authorization Servers. It ha...

Linux Distros Unpatched Vulnerability : CVE-2020-7904

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In JetBrains IntelliJ IDEA before 2019.3, some Maven repositories were accessed via HTTP instead of HTTPS. CVE-2020-7904 Note that Nessus relies on the presence...

org.webjars.npm:vitepress (1.0.0-draft.8) potentially affected by CVE-2025-58752 via org.webjars.npm:vite (3.0.0-beta.9)

org.webjars.npm:vite MAVEN version 3.0.0-beta.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:vite and may be impacted: - org.webjars.npm:vitepress 1.0.0-draft.8 Source cves: CVE-2025-58752 Source advisory:...