EUVD-2018-17485

Malware in sbrugna...

EUVD-2013-3857

Malware in sbrugna...

EUVD-2018-15693

Malware in sbrugna...

EUVD-2024-46892

Malicious code in bioql PyPI...

EUVD-2025-12638

Malicious code in bioql PyPI...

EUVD-2023-1887

Malicious code in bioql PyPI...

EUVD-2023-26754

Malicious code in bioql PyPI...

EUVD-2025-8737

Malicious code in bioql PyPI...

EUVD-2023-0007

Malicious code in bioql PyPI...

EUVD-2022-40850

Malicious code in bioql PyPI...

EUVD-2025-8701

Malicious code in bioql PyPI...

EUVD-2025-12465

Malicious code in bioql PyPI...

EUVD-2021-32629

Malicious code in bioql PyPI...

EUVD-2025-3069

Malicious code in bioql PyPI...

EUVD-2025-8700

Malicious code in bioql PyPI...

CVE-2025-29556

ExaGrid EX10 6.3 - 7.0.1.P08 is vulnerable to Incorrect Access Control. Since version 6.3, ExaGrid enforces restrictions preventing users with the Admin role from creating or modifying users with the Security Officer role without approval. However, a flaw in the account creation process allows an...

CVE-2025-29556

ExaGrid EX10 6.3 - 7.0.1.P08 is vulnerable to Incorrect Access Control. Since version 6.3, ExaGrid enforces restrictions preventing users with the Admin role from creating or modifying users with the Security Officer role without approval. However, a flaw in the account creation process allows an...

CVE-2025-29556

ExaGrid EX10 6.3 - 7.0.1.P08 is vulnerable to Incorrect Access Control. Since version 6.3, ExaGrid enforces restrictions preventing users with the Admin role from creating or modifying users with the Security Officer role without approval. However, a flaw in the account creation process allows an...

CVE-2025-29556

ExaGrid EX10 vulnerable to Incorrect Access Control (CVE-2025-29556) in versions 6.3–7.0.1.P08. A flaw in the account creation flow allows an Admin to bypass restrictions via API request manipulation, enabling creation of Security Officer accounts without prior approval. Attack scenario: an Admin...

Access Control Bypass

Overview Affected versions of this package are vulnerable to Access Control Bypass in the preHandle function of the AuthorizationInterceptor.java component. An attacker can gain unauthorized access to restricted resources by manipulating the Request argument remotely. Remediation A fix was pushed...