EUVD-2023-50479

Malicious code in bioql PyPI...

EUVD-2022-2739

Malicious code in bioql PyPI...

EUVD-2021-27509

Malicious code in bioql PyPI...

EUVD-2025-15819

Malicious code in bioql PyPI...

EUVD-2024-26928

Malicious code in bioql PyPI...

EUVD-2021-9797

Malicious code in bioql PyPI...

EUVD-2023-47369

Malicious code in bioql PyPI...

EUVD-2022-2024

Malicious code in bioql PyPI...

Product Walkthrough: How Passwork 7 Addresses Complexity of Enterprise Security

Passwork is positioned as an on-premises unified platform for both password and secrets management, aiming to address the increasing complexity of credential storage and sharing in modern organizations. The platform recently received a major update that reworks all the core mechanics. Passwork 7...

Digital Threat Modeling Under Authoritarianism

Today's world requires us to make complex and nuanced decisions about our digital security. Evaluating when to use a secure messaging app like Signal or WhatsApp, which passwords to store on your smartphone, or what to share on social media requires us to assess risks and make judgments...

Click Studios Patches Passwordstate Authentication Bypass Vulnerability in Emergency Access Page

Click Studios, the developer of enterprise-focused password management solution Passwordstate, said it has released security updates to address an authentication bypass vulnerability in its software. The high-severity issue, which is yet to be assigned a CVE identifier, has been addressed in...

CVE-2025-54422

Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. In versions 1.16.1 and below, a critical security vulnerability exists in password handling mechanisms. During encrypted sandbox creation, user passwords are transmitted via shared memory,...

Microsoft Removes Password Management from Authenticator App Starting August 2025

Microsoft has said that it's ending support for passwords in its Authenticator app starting August 1, 2025. Microsoft's move is part of a much larger shift away from traditional password-based logins. The company said the changes are also meant to streamline autofill within its two-factor...

Windows LAPS

Binary data wmiwindowslaps.nbin...

Credential Reuse Attack

github.com/arkmq-org/activemq-artemis-operator is vulnerable to Credential Reuse Attack. The vulnerability is due to improper password management where the activemq-artemis-operator generating static passwords that do not regenerate between separate CR dependencies, which allows an attacker to ga...

CVE-2024-29954

A vulnerability in a password management API in Brocade Fabric OS versions before v9.2.1, v9.2.0b, v9.1.1d, and v8.2.3e prints sensitive information in log files. This could allow an authenticated user to view the server passwords for protocols such as scp and sftp. Detail. When the...

CVE-2023-4400

A password management vulnerability in Skyhigh Secure Web Gateway SWG in main releases 11.x prior to 11.2.14, 10.x prior to 10.2.25 and controlled release 12.x prior to 12.2.1, allows some authentication information stored in configuration files to be extracted through SWG REST API. This was...

CVE-2025-47938

TYPO3 vulnerability CVE-2025-47938 affects multiple TYPO3 releases: 9.0.0 up to but not including 9.5.51 ELTS, 10.x up to 10.4.50 ELTS, 11.x up to 11.5.44 ELTS, 12.x up to 12.4.31 LTS, and 13.x up to 13.4.12 LTS. The backend user management interface allows password changes without requiring the ...

The vulnerability of the vaultwarden password management service, related to access control errors, allows attackers to escalate their privileges.

The vulnerability of the vaultwarden password management service is related to access control errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to increase their privileges...

Netwrix Password Secure 安全漏洞

Netwrix Password Secure is an enterprise-class password management solution from Netwrix designed to help organizations securely store, manage and share passwords and other sensitive information. A security vulnerability exists in Netwrix Password Secure 9.2 and earlier versions that stems from a...