EUVD-2022-2174

Malicious code in bioql PyPI...

EUVD-2023-36052

Malicious code in bioql PyPI...

EUVD-2022-7046

Malicious code in bioql PyPI...

EUVD-2022-3495

Malicious code in bioql PyPI...

EUVD-2022-27896

Malicious code in bioql PyPI...

EUVD-2024-3596

Malicious code in bioql PyPI...

EUVD-2021-6773

Malicious code in bioql PyPI...

EUVD-2024-16616

Malicious code in bioql PyPI...

EUVD-2024-2516

Malicious code in bioql PyPI...

EUVD-2025-9721

Malicious code in bioql PyPI...

EUVD-2025-30193

Malicious code in bioql PyPI...

EUVD-2025-13944

Malicious code in bioql PyPI...

PT-2025-40420

Name of the Vulnerable Software and Affected Versions Absolute Secure Access versions prior to 14.10 Description An excess permissions issue exists within the Warehouse component. An attacker who has access to the local file system can read the Java keystore file. The attack complexity is low, an...

CVE-2025-40837

Ericsson Indoor Connect 8855 contains a missing authorization vulnerability which if exploited can allow access to the system as a user with higher privileges than intended...

Duplicate Advisory: Malicious versions of Nx were published

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-cxm3-wv7p-598c. This link is maintained to preserve external references. Original Description Malicious code was inserted into the Nx build system package and several related plugins. The tampered package was...

PT-2025-39401

Name of the Vulnerable Software and Affected Versions Ericsson Indoor Connect 8855 affected versions not specified Description The software contains a missing authorization check. Successful exploitation could allow an attacker to gain access to the system with elevated privileges. Recommendation...

CVE-2025-54807

The secret used for validating authentication tokens is hardcoded in device firmware for affected versions. An attacker who obtains the signing key can bypass authentication, gaining complete access to the system...

PT-2025-38594

Name of the Vulnerable Software and Affected Versions Vasion Print affected versions not specified Description The Vasion Print Virtual Appliance Host and Application Windows client deployments contain an insecure temporary-file handling issue in the PrinterInstallerClient components. The softwar...

CVE-2025-54807 Dover Fueling Solutions ProGauge MagLink LX 4 Devices Use of Hard-coded Cryptographic Key

The secret used for validating authentication tokens is hardcoded in device firmware for affected versions. An attacker who obtains the signing key can bypass authentication, gaining complete access to the system...

CVE-2025-55116

A buffer overflow in the Control-M/Agent can lead to a local privilege escalation when an attacker has access to the system running the Agent. This vulnerability impacts the out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 and potentially earlier unsupported versions...