EUVD-2025-25522

Malicious code in bioql PyPI...

EUVD-2025-28068

Malicious code in bioql PyPI...

EUVD-2024-2559

Malicious code in bioql PyPI...

EUVD-2023-32037

Malicious code in bioql PyPI...

EUVD-2022-2246

Malicious code in bioql PyPI...

EUVD-2022-32836

Malicious code in bioql PyPI...

EUVD-2023-51424

Malicious code in bioql PyPI...

EUVD-2023-27658

Malicious code in bioql PyPI...

EUVD-2025-30813

Malicious code in bioql PyPI...

EUVD-2023-23526

Malicious code in bioql PyPI...

EUVD-2025-2655

Malicious code in bioql PyPI...

EUVD-2025-19102

Malicious code in bioql PyPI...

EUVD-2023-53260

Malicious code in bioql PyPI...

EUVD-2023-51422

Malicious code in bioql PyPI...

EUVD-2022-0739

Malicious code in bioql PyPI...

PT-2025-40604

Name of the Vulnerable Software and Affected Versions Minecraft RCON Terminal versions 0.1.0 through 2.0.6 Description The Minecraft RCON Terminal VS Code extension improperly stores passwords in plaintext within the settings.json file using VS Code's configuration API. This affects versions used...

Minecraft RCON Terminal 安全漏洞

Minecraft RCON Terminal is an extension for Visual Studio Code by Jake T Cooper Personal Developer. A security vulnerability exists in Minecraft RCON Terminal version 2.0.6 and earlier, which stems from the use of the VS Code Configuration API to store passwords in plaintext...

CVE-2025-61680: Plaintext Storage of a Password

Minecraft RCON Terminal is a VS Code extension that streamlines Minecraft server management. Versions 0.1.0 through 2.0.6 stores passwords using VS Code's configuration API which writes to settings.json in plaintext. This issue is fixed in version 2.1.0...

SUSE CVE-2025-54289

Privilege Escalation in operations API in Canonical LXD 6.5 on multiple platforms allows attacker with read permissions to hijack terminal or console sessions and execute arbitrary commands via WebSocket connection hijacking format...

Canonical LXD Vulnerable to Privilege Escalation via WebSocket Connection Hijacking in Operations API

Impact LXD's operations API includes secret values necessary for WebSocket connections when retrieving information about running operations. These secret values are used for authentication of WebSocket connections for terminal and console sessions. Therefore, attackers with only read permissions...