EUVD-2023-44927

Malicious code in bioql PyPI...

EUVD-2023-42965

Malicious code in bioql PyPI...

EUVD-2023-12517

Malicious code in bioql PyPI...

EUVD-2025-14924

Malicious code in bioql PyPI...

EUVD-2023-23388

Malicious code in bioql PyPI...

EUVD-2024-1910

Malicious code in bioql PyPI...

EUVD-2022-1622

Malicious code in bioql PyPI...

EUVD-2022-28660

Malicious code in bioql PyPI...

EUVD-2023-2852

Malicious code in bioql PyPI...

EUVD-2025-16998

Malicious code in bioql PyPI...

EUVD-2025-19184

Malicious code in bioql PyPI...

EUVD-2023-47240

Malicious code in bioql PyPI...

EUVD-2023-44857

Malicious code in bioql PyPI...

EUVD-2022-3301

Malicious code in bioql PyPI...

EUVD-2025-7221

Malicious code in bioql PyPI...

CVE-2025-56449

A security vulnerability was identified in Obsidian Scheduler's REST API 5.0.0 thru 6.3.0. If an account is locked out due to not enrolling in MFA e.g. after the 7-day enforcement window, the REST API still allows the use of Basic Authentication to authenticate and perform administrative actions...

CVE-2025-56449

A security vulnerability was identified in Obsidian Scheduler's REST API 5.0.0 thru 6.3.0. If an account is locked out due to not enrolling in MFA e.g. after the 7-day enforcement window, the REST API still allows the use of Basic Authentication to authenticate and perform administrative actions...

CVE-2025-56449

Obsidian Scheduler REST API 5.0.0–6.3.0 is affected. The root cause is that accounts locked out due to MFA enforcement can still authenticate via Basic Authentication for administrative actions, allowing creation of a new privileged user and bypassing MFA protections. The issue affects the REST A...

CVE-2025-10184

The vulnerability allows any application installed on the device to read SMS/MMS data and metadata from the system-provided Telephony provider without permission, user interaction, or consent. The user is also not notified that SMS data is being accessed. This could lead to sensitive information...

CVE-2025-10184 OnePlus OxygenOS Telephony provider permission bypass

The vulnerability allows any application installed on the device to read SMS/MMS data and metadata from the system-provided Telephony provider without permission, user interaction, or consent. The user is also not notified that SMS data is being accessed. This could lead to sensitive information...