CVE-2025-56231

Tonec Internet Download Manager 6.42.41.1 and earlier suffers from Missing SSL Certificate Validation, which allows attackers to bypass update protections...

CVE-2025-56232

GOG Galaxy 2.0.0.2 suffers from Missing SSL Certificate Validation. An attacker who controls the local network, DNS, or a proxy can perform a man-in-the-middle MitM attack to intercept update requests and replace installer or update packages with malicious files...

GHSA-3XGR-H5HQ-7299 GeoIP processor disables SSL certificate validation when downloading databases

Impact The GeoIP processor in Data Prepper was configured to trust all SSL certificates and disable hostname verification when downloading GeoIP databases from HTTP URLs, making downloads vulnerable to man-in-the-middle attacks. The GeoIP processor included a custom SSL implementation that...

EUVD-2018-4235

Malware in sbrugna...

EUVD-2018-1898

Malware in sbrugna...

EUVD-2010-4500

Malware in sbrugna...

EUVD-2016-3352

Malware in sbrugna...

EUVD-2014-3637

Malware in sbrugna...

EUVD-2019-3358

Malware in sbrugna...

EUVD-2021-0980

Malware in sbrugna...

EUVD-2023-1171

Malicious code in bioql PyPI...

EUVD-2022-1570

Malicious code in bioql PyPI...

EUVD-2022-2318

Malicious code in bioql PyPI...

EUVD-2025-23626

Malicious code in bioql PyPI...

EUVD-2022-7214

Malicious code in bioql PyPI...

EUVD-2021-31119

Malicious code in bioql PyPI...

EUVD-2024-1044

Malicious code in bioql PyPI...

EUVD-2023-1385

Malicious code in bioql PyPI...

EUVD-2024-21396

Malicious code in bioql PyPI...

EUVD-2022-7437

Malicious code in bioql PyPI...