EUVD-2020-1453

Malware in sbrugna...

EUVD-2016-0374

Malware in sbrugna...

EUVD-2021-0041

Malware in sbrugna...

EUVD-2021-0702

Malware in sbrugna...

EUVD-2016-0921

Malware in sbrugna...

EUVD-2019-14018

Malware in sbrugna...

EUVD-2014-2233

Malware in sbrugna...

EUVD-2023-55133

Malicious code in bioql PyPI...

EUVD-2025-27768

Malicious code in bioql PyPI...

EUVD-2022-4355

Malicious code in bioql PyPI...

EUVD-2025-27767

Malicious code in bioql PyPI...

EUVD-2022-2297

Malicious code in bioql PyPI...

CVE-2025-40925 Starch versions 0.14 and earlier generate session ids insecurely

Starch versions 0.14 and earlier generate session ids insecurely. The default session id generator returns a SHA-1 hash seeded with a counter, the epoch time, the built-in rand function, the PID, and internal Perl reference addresses. The PID will come from a small set of numbers, and the epoch...

CVE-2025-34188

CVE-2025-34188 affects Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to 1.0.735 and Vasion Print Application prior to 20.0.1330 (macOS/Linux deployments). The root cause is a vulnerability in the local logging mechanism that stores authentication session tokens (PHPSESSID, XSR...

CVE-2025-40933

Apache::AuthAny::Cookie v0.201 or earlier for Perl generates session ids insecurely. Session ids are generated using an MD5 hash of the epoch time and a call to the built-in rand function. The epoch time may be guessed, if it is not leaked from the HTTP Date header. The built-in rand function is...

CVE-2025-40933 Apache::AuthAny::Cookie v0.201 or earlier for Perl generates session ids insecurely

Apache::AuthAny::Cookie v0.201 or earlier for Perl generates session ids insecurely. Session ids are generated using an MD5 hash of the epoch time and a call to the built-in rand function. The epoch time may be guessed, if it is not leaked from the HTTP Date header. The built-in rand function is...

CVE-2025-40933

The Perl module Apache::AuthAny::Cookie versions 0.201 and earlier is vulnerable to insecure session ID generation. The root cause is the use of an MD5 hash of the epoch time combined with the built-in rand function , which is unsuitable for cryptographic purposes. Because the epoch time may be g...

CVE-2025-30040

The vulnerability allows unauthenticated users to download a file containing session ID data by directly accessing the "/cgi-bin/CliniNET.prd/utils/userlogxls.pl" endpoint...

CVE-2025-30041

The paths "/cgi-bin/CliniNET.prd/utils/userlogstat.pl", "/cgi-bin/CliniNET.prd/utils/usrlogstat.pl", and "/cgi-bin/CliniNET.prd/utils/dblogstat.pl" expose data containing session IDs...

CVE-2025-30041 Missing authentication in APIs returning statistical data along with session IDs

The paths "/cgi-bin/CliniNET.prd/utils/userlogstat.pl", "/cgi-bin/CliniNET.prd/utils/usrlogstat.pl", and "/cgi-bin/CliniNET.prd/utils/dblogstat.pl" expose data containing session IDs...