292 matches found
EUVD-2022-4754
Malicious code in bioql PyPI...
EUVD-2022-44752
Malicious code in bioql PyPI...
EUVD-2022-29719
Malicious code in bioql PyPI...
EUVD-2023-30043
Malicious code in bioql PyPI...
EUVD-2022-4350
Malicious code in bioql PyPI...
Iranian Hackers Use Fake Job Lures to Breach Europe’s Critical Industries
New research from Check Point Research reveals the Iranian cyber group Nimbus Manticore is targeting defence, telecom, and aerospace companies in Europe with fake job offers. Learn how they use advanced malware to steal sensitive data...
Security Bulletin: IBM Maximo Application Suite Ai-Service Component uses Nimbus JOSE+JWT library which is vulnerable to CVE-2025-53864
Summary Security Bulletin: IBM Maximo Application Suite Ai-Service Component uses Nimbus JOSE+JWT library which is vulnerable to CVE-2025-53864. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2025-53864 DESCRIPTION: Connect2id Nimbu...
Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in nimbus-jose-jwt-9.24.4.jar
Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of nimbus-jose-jwt-9.24.4.jar Vulnerability Details CVEID:CVE-2023-52428 DESCRIPTION: In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can cause a denial of service resource consumption via a large JWE p2c header valu...
Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is affected by an Uncontrolled Recursion Vulnerability in Connect2id Nimbus JOSE + JWT (CVE-2025-53864)
Summary Connect2id Nimbus JOSE + JWT is used by IBM DevOps Deploy / IBM UrbanCode Deploy UCD as part of integrating with OpenID Connect providers OIDC and is affected by an Uncontrolled Recursion Vulnerability. CVE-2025-53864. Vulnerability Details CVEID:CVE-2025-53864 DESCRIPTION: Connect2id...
Security Bulletin: Due to use of Connect2id Nimbus JOSE+JWT, IBM Watson Studio in Cloud Pak for Data is affected by denial of service
Summary Connect2id Nimbus JOSE+JWT is used by Watson Studio in Cloud Pak for Data. Vulnerability Details CVEID:CVE-2023-52428 DESCRIPTION: In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can cause a denial of service resource consumption via a large JWE p2c header value aka iteration cou...
Linux Distros Unpatched Vulnerability : CVE-2025-53864
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Connect2id Nimbus JOSE + JWT 10.0.x before 10.0.2 and 9.37.x before 9.37.4 allows a remote attacker to cause a denial of service via a deeply nested JSON object...
Malicious code in nimbus-grove-iwn738-project (npm)
The package nimbus-grove-iwn738-project was found to contain malicious code...
Malicious code in waterfall-nimbus-bst529-project (npm)
The package waterfall-nimbus-bst529-project was found to contain malicious code...
Malicious code in quagmire-nimbus-yvc023-project (npm)
The package quagmire-nimbus-yvc023-project was found to contain malicious code...
Malicious code in nimbus-yawn-neu284-project (npm)
The package nimbus-yawn-neu284-project was found to contain malicious code...
Malicious code in nimbus-umbra-muj494-project (npm)
The package nimbus-umbra-muj494-project was found to contain malicious code...
Malicious code in star-nimbus-koc547-project (npm)
The package star-nimbus-koc547-project was found to contain malicious code...
Malicious code in quagmire-nimbus-rhb531-project (npm)
The package quagmire-nimbus-rhb531-project was found to contain malicious code...