EUVD-2025-32855

CubeAPM nightly-2025-08-01-1 allow unauthenticated attackers to inject arbitrary log entries into production systems via the /api/logs/insert/elasticsearch/bulk endpoint. This endpoint accepts bulk log data without requiring authentication or input validation, allowing remote attackers to perform...

PyVista 代码注入漏洞

PyVista is an open source Python library for 3D drawing and mesh analysis from PyVista. A code injection vulnerability exists in PyVista version 0.46.3 that stems from dependency obfuscation and could lead to remote code execution and supply chain attacks...

EUVD-2025-14389

Malicious code in bioql PyPI...

EUVD-2025-4016

Malicious code in bioql PyPI...

EUVD-2025-7811

Malicious code in bioql PyPI...

EUVD-2024-34228

Malicious code in bioql PyPI...

EUVD-2025-20334

Malicious code in bioql PyPI...

EUVD-2025-28008

Malicious code in bioql PyPI...

EUVD-2025-14344

Malicious code in bioql PyPI...

EUVD-2025-29489

Malicious code in bioql PyPI...

EUVD-2024-2007

Malicious code in bioql PyPI...

EUVD-2025-5862

Malicious code in bioql PyPI...

EUVD-2021-3258

Malicious code in bioql PyPI...

EUVD-2023-1518

Malicious code in bioql PyPI...

EUVD-2024-21056

Malicious code in bioql PyPI...

EUVD-2022-42631

Malicious code in bioql PyPI...

EUVD-2023-1738

Malicious code in bioql PyPI...

EUVD-2023-2060

Malicious code in bioql PyPI...

New macOS XCSSET Variant Targets Firefox with Clipper and Persistence Module

Cybersecurity researchers have discovered an updated version of a known Apple macOS malware called XCSSET that has been observed in limited attacks. "This new variant of XCSSET brings key changes related to browser targeting, clipboard hijacking, and persistence mechanisms," the Microsoft Threat...

Malicious code in bloxypy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ca1bb0aab09d6ef59ee1ff8485c8c2a6b565c1311246ed61d63c9757bd44ecdc Attempting to use the module starts obfuscated code containing an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like...