EUVD-2022-41329

Malicious code in bioql PyPI...

EUVD-2022-31763

Malicious code in bioql PyPI...

EUVD-2025-16144

Malicious code in bioql PyPI...

EUVD-2025-20350

Malicious code in bioql PyPI...

EUVD-2025-18278

Malicious code in bioql PyPI...

EUVD-2025-18276

Malicious code in bioql PyPI...

EUVD-2023-58615

Malicious code in bioql PyPI...

EUVD-2024-37245

Malicious code in bioql PyPI...

EUVD-2022-0080

Malicious code in bioql PyPI...

EUVD-2023-1437

Malicious code in bioql PyPI...

EUVD-2023-38608

Malicious code in bioql PyPI...

EUVD-2022-33676

Malicious code in bioql PyPI...

EUVD-2022-29902

Malicious code in bioql PyPI...

EUVD-2022-44734

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2025-59420

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.4, Authlib's JWS verification accepts tokens that declare unknow...

Authlib 安全漏洞

Authlib is the ultimate Python library for building OAuth and OpenID Connect servers open-sourced by Authlib. A security vulnerability exists in Authlib versions prior to 1.6.4, which stems from JWS authentication accepting tokens declaring unknown key header parameters, which could lead to polic...

CVE-2025-59420: Insufficient Verification of Data Authenticity

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.4, Authlib’s JWS verification accepts tokens that declare unknown critical header parameters crit, violating RFC 7515 “must‑understand” semantics. An attacker can craft a signed token with a critical...

CVE-2025-56448

The Positron PX360BT SW REV 8 car alarm system is vulnerable to a replay attack due to a failure in implementing rolling code security. The alarm system does not properly rotate or invalidate used codes, allowing repeated reuse of captured transmissions. This exposes users to significant security...

CVE-2025-37127 Authenticated Replay Attack contains Cryptographic Vulnerability

A vulnerability in the cryptographic logic used by HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote attacker to gain shell access. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system, potentially...

CVE-2025-56448

The Positron PX360BT SW REV 8 car alarm system is vulnerable to a replay attack due to a failure in implementing rolling code security. The alarm system does not properly rotate or invalidate used codes, allowing repeated reuse of captured transmissions. This exposes users to significant security...