EUVD-2024-19123

Malicious code in bioql PyPI...

EUVD-2024-36992

Malicious code in bioql PyPI...

EUVD-2024-19062

Malicious code in bioql PyPI...

EUVD-2024-26007

Malicious code in bioql PyPI...

EUVD-2024-19045

Malicious code in bioql PyPI...

EUVD-2024-19087

Malicious code in bioql PyPI...

EUVD-2024-19081

Malicious code in bioql PyPI...

CVE-2025-34227 Nagios XI < 2026R1 Configuration Wizard Authenticated Command Injection

Nagios XI 2026R1 is vulnerable to an authenticated command injection vulnerability within the MongoDB Database, MySQL Query, MySQL Server, Postgres Server, and Postgres Query wizards. It is possible to inject shell characters into arguments provided to the service and execute arbitrary system...

Cannot request cryptocontainer. Win32 error:Keyset as registered is invalid

Challenge A Veeam Agent for Microsoft Windows backup job completes with the following warnings: Cannot request cryptocontainer. Win32 error:Keyset as registered is invalid. and SQL VSS Writer is missing: databases will be backed up in crash-consistent state and transaction log processing will be...

CVE-2025-47997

Concurrent execution using shared resource with improper synchronization 'race condition' in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2025-55227

Improper neutralization of special elements used in a command 'command injection' in SQL Server allows an authorized attacker to elevate privileges over a network...

Patch Tuesday - September 2025

Microsoft is addressing 176 vulnerabilities today, which seems like a lot, and it is. Curiously, Microsoft’s own Security Update Guide SUG for September 2025 Patch Tuesday only lists 86 vulns, and that’s because the SUG doesn’t include a large number of open source software OSS fixes published...

Vulnerabilities fixed in Microsoft SQL Server

Microsoft has fixed vulnerabilities in SQL Server. A malicious party could exploit the vulnerabilities to cause a denial-of-service DoS, grant themselves elevated privileges and/or gain access to sensitive data. Microsoft has made updates available that fix the described vulnerabilities. We...

CVE-2025-55227

Improper neutralization of special elements used in a command 'command injection' in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2025-55227

Improper neutralization of special elements used in a command 'command injection' in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2025-47997

Concurrent execution using shared resource with improper synchronization 'race condition' in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2025-47997

Concurrent execution using shared resource with improper synchronization 'race condition' in SQL Server allows an authorized attacker to disclose information over a network...

CVE-2025-55227 Microsoft SQL Server Elevation of Privilege Vulnerability

...

CVE-2025-55227 Microsoft SQL Server Elevation of Privilege Vulnerability

...

CVE-2025-47997 Microsoft SQL Server Information Disclosure Vulnerability

...