EUVD-2023-46378

Malicious code in bioql PyPI...

EUVD-2022-6938

Malicious code in bioql PyPI...

EUVD-2025-28444

Malicious code in bioql PyPI...

EUVD-2023-24775

Malicious code in bioql PyPI...

Details of a Scam

Longtime Crypto-Gram readers know that I collect personal experiences of people being scammed. Here's an almost: Then he added, "Here at Chase, we'll never ask for your personal information or passwords." On the contrary, he gave me more information--two "cancellation codes" and a long case numbe...

Malicious code in docusaurus-supervisor-eris-axios (npm)

The package docusaurus-supervisor-eris-axios was found to contain malicious code...

Malicious code in supervisor-geochemistry-postcss-deimos (npm)

The package supervisor-geochemistry-postcss-deimos was found to contain malicious code...

MAL-2025-46178 Malicious code in supervisor-geochemistry-postcss-deimos (npm)

The package supervisor-geochemistry-postcss-deimos was found to contain malicious code...

Malicious code in oauth-venus-nconf-supervisor (npm)

The package oauth-venus-nconf-supervisor was found to contain malicious code...

MAL-2025-44031 Malicious code in docusaurus-supervisor-eris-axios (npm)

The package docusaurus-supervisor-eris-axios was found to contain malicious code...

MAL-2025-44662 Malicious code in hyperion-markdown-pdf-supervisor-selenium (npm)

The package hyperion-markdown-pdf-supervisor-selenium was found to contain malicious code...

MAL-2025-45403 Malicious code in oauth-venus-nconf-supervisor (npm)

The package oauth-venus-nconf-supervisor was found to contain malicious code...

Malicious code in hyperion-markdown-pdf-supervisor-selenium (npm)

The package hyperion-markdown-pdf-supervisor-selenium was found to contain malicious code...

CVE-2025-52547

E3 Site Supervisor Control firmware version 2.31F01 MGW contains an API call that lacks input validation. An attacker can use this command to continuously crash the application services...

CVE-2025-52544

E3 Site Supervisor Control firmware version 2.31F01 has a floor plan feature that allows for an unauthenticated attacker to upload floor plan files. By uploading a specially crafted floor plan file, an attacker can access any file from the E3 file system...

CVE-2025-52550

E3 Site Supervisor Control firmware version 2.31F01 firmware upgrade packages are unsigned. An attacker can forge malicious firmware upgrade packages. An attacker with admin access to the application services can install a malicious firmware upgrade...

riscv: save the SR_SUM status over switches

...

CVE-2025-52547

E3 Site Supervisor Control firmware version 2.31F01 MGW contains an API call that lacks input validation. An attacker can use this command to continuously crash the application services...

CVE-2025-52547

E3 Site Supervisor Control firmware version 2.31F01 MGW contains an API call that lacks input validation. An attacker can use this command to continuously crash the application services...

CVE-2025-52549

E3 Site Supervisor Control firmware version 2.31F01 generates the root linux password on each boot. An attacker can generate the root linux password for a vulnerable device based on known or easy to fetch parameters...