EUVD-2024-44539

Malicious code in bioql PyPI...

EUVD-2024-41307

Malicious code in bioql PyPI...

EUVD-2023-0845

Malicious code in bioql PyPI...

EUVD-2025-27854

Malicious code in bioql PyPI...

EUVD-2023-3038

Malicious code in bioql PyPI...

EUVD-2025-25469

Malicious code in bioql PyPI...

EUVD-2023-31842

Malicious code in bioql PyPI...

EUVD-2023-46364

Malicious code in bioql PyPI...

EUVD-2024-41274

Malicious code in bioql PyPI...

EUVD-2022-34181

Malicious code in bioql PyPI...

EUVD-2022-1798

Malicious code in bioql PyPI...

EUVD-2022-33355

Malicious code in bioql PyPI...

extloader

extLoader A small toolkit for managing and deploying unpacked...

PT-2025-44109

Name of the Vulnerable Software and Affected Versions Linux kernel versions 6.16.0+ and later Description The Linux kernel contains a flaw in the BPF subsystem related to handling struct operations on the LoongArch architecture. Specifically, the return values of struct operations are not correct...

CVE-2025-34209

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to 22.0.862 and Application prior to 20.0.2014 VA and SaaS deployments contain Docker images with the private GPG key and passphrase for the account no‑reply+virtual‑[email protected]. The key is stored in cleartext and the...

CVE-2025-34209 Vasion Print (formerly PrinterLogic) Hardcoded GPG Private Key

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to 22.0.862 and Application prior to 20.0.2014 VA and SaaS deployments contain Docker images with the private GPG key and passphrase for the account no‑reply+virtual‑[email protected]. The key is stored in cleartext and the...

curl: AWS SigV4 Signature Disclosure via Verbose Logging in libcurl

Summary When libcurl is built with AWS SigV4 support, enabling verbose logging CURLOPTVERBOSE or --verbose causes the library to print both the string-to-sign and the final HMAC signature into logs. Because signatures remain valid for several minutes and are derived directly from AWS credentials,...

Open Redirection

googlesignin is vulnerable to Open Redirection. The vulnerability is due to open redirect due to the proceedto session value accepting protocol-relative URLs which can be set via a malicious form submission, allowing an attacker to redirect users to another origin...

PT-2025-39879

Name of the Vulnerable Software and Affected Versions Vasion Print versions prior to 22.0.862 Vasion Print Application versions prior to 20.0.2014 Description The Vasion Print Virtual Appliance Host and Application contain Docker images with a private GPG key and its passphrase stored in cleartex...

PT-2025-39893

Name of the Vulnerable Software and Affected Versions Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 25.1.102 Vasion Print formerly PrinterLogic Application versions prior to 25.1.1413 Description The software contains a blind server-side request forgery SSRF issue...