EUVD-2025-16000

Malicious code in bioql PyPI...

EUVD-2024-40891

Malicious code in bioql PyPI...

EUVD-2022-52095

Malicious code in bioql PyPI...

EUVD-2025-17594

Malicious code in bioql PyPI...

EUVD-2025-22124

Malicious code in bioql PyPI...

EUVD-2023-51443

Malicious code in bioql PyPI...

EUVD-2023-51439

Malicious code in bioql PyPI...

CVE-2025-24088

A configuration issue in Apple macOS (versions prior to Tahoe 26 ) allows an application to potentially override Mobile Device Management (MDM)-enforced settings from profiles. The root cause was addressed by adding additional logic in the update. To remediate this vulnerability, users should upd...

CVE-2025-24088: Improper Access Control

The issue was addressed by adding additional logic. This issue is fixed in macOS Tahoe 26. An app may be able to override MDM-enforced settings from profiles...

CVE-2025-55443: Cleartext Storage of Sensitive Information

Telpo MDM 1.4.6 thru 1.4.9 for Android contains sensitive administrator credentials and MQTT server connection details IP/port that are stored in plaintext within log files on the device's external storage. This allows attackers with access to these logs to: 1. Authenticate to the MDM web platfor...

CVE-2025-43720

Headwind MDM before 5.33.1 makes configuration details accessible to unauthorized users. The Configuration profile is exposed to the Observer user role, revealing the password requires to escape out of the MDM controlled device's profile...

CVE-2025-43720

Headwind MDM before 5.33.1 makes configuration details accessible to unauthorized users. The Configuration profile is exposed to the Observer user role, revealing the password requires to escape out of the MDM controlled device's profile...

CVE-2025-43720

Headwind MDM before 5.33.1 makes configuration details accessible to unauthorized users. The Configuration profile is exposed to the Observer user role, revealing the password requires to escape out of the MDM controlled device's profile...

CVE-2025-43720: Missing Authorization

Headwind MDM before 5.33.1 makes configuration details accessible to unauthorized users. The Configuration profile is exposed to the Observer user role, revealing the password requires to escape out of the MDM controlled device's profile...

CVE-2025-43720

Headwind MDM before 5.33.1 makes configuration details accessible to unauthorized users. The Configuration profile is exposed to the Observer user role, revealing the password requires to escape out of the MDM controlled device's profile...

CVE-2025-43720

Headwind MDM before 5.33.1 makes configuration details accessible to unauthorized users. The Configuration profile is exposed to the Observer user role, revealing the password requires to escape out of the MDM controlled device's profile...

CVE-2025-43720

Headwind MDM before 5.33.1 makes configuration details accessible to unauthorized users. The Configuration profile is exposed to the Observer user role, revealing the password requires to escape out of the MDM controlled device's profile...

CVE-2025-43720

Headwind MDM versions prior to 5.33.1 are vulnerable to a missing authorization flaw (CWE-862) that allows unauthorized users to access sensitive configuration details. Specifically, the Configuration profile is exposed to users with the Observer role , which can reveal the password required to e...

Headwind MDM 安全漏洞

Headwind MDM is a platform for managing Android devices in an organization. A security vulnerability exists in Headwind MDM versions prior to 5.33.1, which stems from configuration details being accessible to unauthorized users, potentially leading to password disclosure...

PT-2025-27860 · H Mdm +1 · Headwind Mdm +1

Name of the Vulnerable Software and Affected Versions: Headwind MDM versions prior to 5.33.1 Description: Headwind MDM versions prior to 5.33.1 allow unauthorized access to configuration details. Specifically, the configuration profile is exposed to users with the Observer role, revealing the...