EUVD-2022-43614

Malicious code in bioql PyPI...

EUVD-2022-28256

Malicious code in bioql PyPI...

EUVD-2024-36055

Malicious code in bioql PyPI...

EUVD-2021-30834

Malicious code in bioql PyPI...

EUVD-2022-43613

Malicious code in bioql PyPI...

EUVD-2022-28261

Malicious code in bioql PyPI...

EUVD-2022-43615

Malicious code in bioql PyPI...

EUVD-2021-30836

Malicious code in bioql PyPI...

EUVD-2023-37861

Malicious code in bioql PyPI...

EUVD-2023-36483

Malicious code in bioql PyPI...

EUVD-2022-43616

Malicious code in bioql PyPI...

EUVD-2021-30835

Malicious code in bioql PyPI...

EUVD-2021-30833

Malicious code in bioql PyPI...

EUVD-2024-36056

Malicious code in bioql PyPI...

EUVD-2024-24968

Malicious code in bioql PyPI...

CISA Warns: SysAid Flaws Under Active Attack Enable Remote File Access and SSRF

The U.S. Cybersecurity and Infrastructure Security Agency CISA added two security flaws impacting SysAid IT support software to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The vulnerabilities in question are listed below - CVE-2025-2775 CVSS score: 9...

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2025-54309link is external CrushFTP Unprotected Alternate Channel Vulnerability CVE-2025-6558link is external Google Chromium ANGLE and GPU Improper Input...

SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability

SysAid On-Prem contains an improper restriction of XML external entity reference vulnerability in the Checkin processing functionality, allowing for administrator account takeover and file read primitives...

SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability

SysAid On-Prem contains an improper restriction of XML external entity reference vulnerability in the Server URL processing functionality, allowing for administrator account takeover and file read primitives...

The vulnerability of the `com.ilient.agentApi.LshwAgent#doPost` method in the SysAid hardware and software support and control automation software allows attackers to perform XXE attacks.

The vulnerability of the com.ilient.agentApi.LshwAgentdoPost method in SysAid’s automation software for supporting and controlling hardware and software systems is related to incorrect restrictions on XML links to external objects during the processing of the /lshw endpoint. Exploiting this...