EUVD-2024-46509

Malicious code in bioql PyPI...

EUVD-2023-58941

Malicious code in bioql PyPI...

EUVD-2023-58777

Malicious code in bioql PyPI...

EUVD-2024-34662

Malicious code in bioql PyPI...

EUVD-2025-18758

Malicious code in bioql PyPI...

EUVD-2024-38549

Malicious code in bioql PyPI...

EUVD-2025-19558

Malicious code in bioql PyPI...

EUVD-2025-19559

Malicious code in bioql PyPI...

EUVD-2023-31041

Malicious code in bioql PyPI...

EUVD-2023-53555

Malicious code in bioql PyPI...

EUVD-2023-53776

Malicious code in bioql PyPI...

MAL-2025-47713 Malicious code in playbook-builder-webapp (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in playbook-builder-webapp (npm)

--- -= Per source details. Do not edit below this line.=-...

SUSE CVE-2025-46702

Mattermost versions 10.5.x = 10.5.5, 9.11.x = 9.11.15, 10.8.x = 10.8.0, 10.7.x = 10.7.2, 10.6.x = 10.6.5 fail to properly enforce channel member management permissions when adding participants to playbook runs. This allows authenticated users with member-level permissions to bypass system admin...

SUSE CVE-2025-47871

Mattermost versions 10.5.x = 10.5.5, 9.11.x = 9.11.15, 10.8.x = 10.8.0, 10.7.x = 10.7.2, 10.6.x = 10.6.5 fail to properly validate channel membership when retrieving playbook run metadata, allowing authenticated users who are playbook members but not channel members to access sensitive informatio...

SUSE CVE-2025-3227

Mattermost versions 10.5.x = 10.5.5, 9.11.x = 9.11.15, 10.8.x = 10.8.0, 10.7.x = 10.7.2, 10.6.x = 10.6.5 fail to properly enforce channel member management permissions in playbook runs, allowing authenticated users without the 'Manage Channel Members' permission to add or remove users from public...

Eviction Strategies Tool Released

Today, CISA released the Eviction Strategies Tool to provide cyber defenders with critical support and assistance during the containment and eviction phases of incident response. This tool includes: Cyber Eviction Strategies Playbook Next Generation Playbook-NG : A web-based application for...

GO-2025-3772 Mattermost allows unauthorized channel member management through playbook runs in github.com/mattermost/mattermost-server

Mattermost allows unauthorized channel member management through playbook runs in github.com/mattermost/mattermost-server...

GO-2025-3771 Mattermost allows an unauthorized Guest user access to Playbook in github.com/mattermost/mattermost-server

Mattermost allows an unauthorized Guest user access to Playbook in github.com/mattermost/mattermost-server...

CVE-2025-46702

Mattermost versions 10.5.x = 10.5.5, 9.11.x = 9.11.15, 10.8.x = 10.8.0, 10.7.x = 10.7.2, 10.6.x = 10.6.5 fail to properly enforce channel member management permissions when adding participants to playbook runs. This allows authenticated users with member-level permissions to bypass system admin...