EUVD-2022-6780

Malicious code in bioql PyPI...

EUVD-2022-2698

Malicious code in bioql PyPI...

EUVD-2023-40432

Malicious code in bioql PyPI...

EUVD-2024-39454

Malicious code in bioql PyPI...

EUVD-2024-39455

Malicious code in bioql PyPI...

EUVD-2022-2128

Malicious code in bioql PyPI...

EUVD-2022-7716

Malicious code in bioql PyPI...

EUVD-2022-4985

Malicious code in bioql PyPI...

EUVD-2022-3952

Malicious code in bioql PyPI...

EUVD-2022-32078

Malicious code in bioql PyPI...

EUVD-2023-29184

Malicious code in bioql PyPI...

EUVD-2024-0111

Malicious code in bioql PyPI...

EUVD-2025-21693

Malicious code in bioql PyPI...

A week in security (September 8 – September 14)

Last week on Malwarebytes Labs: AI browsers or agentic browsers: a look at the future of web surfing From Fitbit to financial despair: How one woman lost her life savings and more to a scammer Meta ignored child sex abuse in VR, say whistleblowers When AI chatbots leak and how it happens Fake...

CVE-2025-42925

Due to the lack of randomness in assigning Object Identifiers in the SAP NetWeaver AS JAVA IIOP service, an authenticated attacker with low privileges could predict the identifiers by conducting a brute force search. By leveraging knowledge of several identifiers generated close to the same time,...

Cloudflare Public Bug Bounty: [Variation of #1554049] 1-Click Chaining of Self-XSS, Cookie Tossing and AntiCSRF Token Prediction leads to auto approval in Access Temp Auth

A vulnerability was discovered in Cloudflare Access that could allow for unauthorized approvals within the Temporary Auth workflow. The issue was resolved after the researcher reported it to Cloudflare...

Linux Distros Unpatched Vulnerability : CVE-2021-32278

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in faad2 through 2.10.0. A heap-buffer-overflow exists in the function ltprediction located in ltpredict.c. It allows an attacker to cau...

Linux Distros Unpatched Vulnerability : CVE-2020-1773

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker with the ability to generate session IDs or password reset tokens, either by being able to authenticate or by exploiting OSA-2020-09, may be able to...

Linux Distros Unpatched Vulnerability : CVE-2016-2039

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libraries/session.inc.php in phpMyAdmin 4.0.x before 4.0.10.13, 4.4.x before 4.4.15.3, and 4.5.x before 4.5.4 does not properly generate CSRF token values, whic...

Linux Distros Unpatched Vulnerability : CVE-2024-10603

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Weaknesses in the generation of TCP/UDP source ports and some other header values in Google's gVisor allowed them to be predicted by an external attacker in som...