EUVD-2024-50387

Malicious code in bioql PyPI...

EUVD-2024-50386

Malicious code in bioql PyPI...

EUVD-2024-50397

Malicious code in bioql PyPI...

EUVD-2024-50400

Malicious code in bioql PyPI...

EUVD-2023-55018

Malicious code in bioql PyPI...

EUVD-2024-50389

Malicious code in bioql PyPI...

EUVD-2024-50384

Malicious code in bioql PyPI...

EUVD-2025-1555

Malicious code in bioql PyPI...

EUVD-2023-55015

Malicious code in bioql PyPI...

EUVD-2024-50392

Malicious code in bioql PyPI...

EUVD-2024-50399

Malicious code in bioql PyPI...

EUVD-2024-50394

Malicious code in bioql PyPI...

EUVD-2024-48858

Malicious code in bioql PyPI...

EUVD-2023-55009

Malicious code in bioql PyPI...

EUVD-2023-55017

Malicious code in bioql PyPI...

Trimble Cityworks 15.x < 15.8.9 / 23.x < 23.10 Deserialization RCE

The version of Trimble Cityworks installed on the remote host is 15.x prior to 15.8.9, or 23.x prior to 23.10. It is, therefore, affected by a deserialization vulnerability. This could allow an authenticated user to perform a remote code execution attack against a customer's Microsoft Internet...

CVE-2025-0220

A vulnerability, which was classified as problematic, was found in Trimble SPS851 488.01. This affects an unknown part of the component Ethernet Configuration Menu. The manipulation of the argument Hostname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...

CVE-2025-0219

A vulnerability, which was classified as problematic, has been found in Trimble SPS851 488.01. Affected by this issue is some unknown functionality of the component Receiver Status Identity Tab. The manipulation of the argument System Name leads to cross site scripting. The attack may be launched...

CVE-2023-27195

Trimble TM4Web 22.2.0 allows unauthenticated attackers to access /inc/tmajax.msw?func=UserfromUUID= to retrieve the last registration access code and use this access code to register a valid account. via a PUT /inc/tmajax.msw request. If the access code was used to create an Administrator account...

Chinese Hackers Exploit Trimble Cityworks Flaw to Infiltrate U.S. Government Networks

A Chinese-speaking threat actor tracked as UAT-6382 has been linked to the exploitation of a now-patched remote-code-execution vulnerability in Trimble Cityworks to deliver Cobalt Strike and VShell. "UAT-6382 successfully exploited CVE-2025-0944, conducted reconnaissance, and rapidly deployed a...