EUVD-2023-42334

Malicious code in bioql PyPI...

EUVD-2024-42772

Malicious code in bioql PyPI...

EUVD-2021-33478

Malicious code in bioql PyPI...

EUVD-2021-7649

Malicious code in bioql PyPI...

EUVD-2025-9837

Malicious code in bioql PyPI...

CVE-2025-10472 harry0703 MoneyPrinterTurbo URL video.py stream_video path traversal

A vulnerability has been found in harry0703 MoneyPrinterTurbo up to 1.2.6. The impacted element is the function downloadvideo/streamvideo of the file app/controllers/v1/video.py of the component URL Handler. The manipulation of the argument filepath leads to path traversal. The attack can be...

CVE-2025-58435

Open OnDemand is an open-source HPC portal. Prior to versions 3.1.15 and 4.0.7, noVNC interactive applications did not correctly rotate the password when TurboVNC was higher than version 3.1.2. The likelihood of exploitation is low as a user would need to share their link to an active desktop...

CVE-2025-58435 Open OnDemand didn't rotate password for VNC batch_connect

Open OnDemand is an open-source HPC portal. Prior to versions 3.1.15 and 4.0.7, noVNC interactive applications did not correctly rotate the password when TurboVNC was higher than version 3.1.2. The likelihood of exploitation is low as a user would need to share their link to an active desktop...

CVE-2025-58435 Open OnDemand didn't rotate password for VNC batch_connect

Open OnDemand is an open-source HPC portal. Prior to versions 3.1.15 and 4.0.7, noVNC interactive applications did not correctly rotate the password when TurboVNC was higher than version 3.1.2. The likelihood of exploitation is low as a user would need to share their link to an active desktop...

MAL-2025-42688 Malicious code in @lbnqduy2180500/turbo-train (npm)

The package @lbnqduy2180500/turbo-train was found to contain malicious code...

Malicious code in @lbnqduy2180500/turbo-train (npm)

The package @lbnqduy2180500/turbo-train was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2020-35538

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A crafted input file could cause a null pointer dereference in jcopysamplerows when processed by libjpeg-turbo. CVE-2020-35538 Note that Nessus relies on the...

Citizen Lab Reports Hidden VPN Networks Sharing Ownership and Security Flaws

Citizen Lab's new report, Hidden Links, uncovers a network of VPN providers like Turbo VPN and VPN Monster…...

Malicious code in test-mlw2-trior-turbo (npm)

The package test-mlw2-trior-turbo was found to contain malicious code...

MAL-2025-36501 Malicious code in test-mlw2-trior-turbo (npm)

The package test-mlw2-trior-turbo was found to contain malicious code...

Malicious code in test-mlw2-turbo-linch (npm)

The package test-mlw2-turbo-linch was found to contain malicious code...

Malicious code in @lbnqduy/turbo-chainsaw (npm)

The package @lbnqduy/turbo-chainsaw was found to contain malicious code...

MAL-2025-36521 Malicious code in test-mlw2-turbo-linch (npm)

The package test-mlw2-turbo-linch was found to contain malicious code...

MAL-2025-8357 Malicious code in @lbnqduy/turbo-chainsaw (npm)

The package @lbnqduy/turbo-chainsaw was found to contain malicious code...

Malicious code in require-turbo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8b488e13ee585b7b97c9cba93c25b1a58678d591f8ef16720f812f047be16f3d The OpenSSF Package Analysis project identified 'require-turbo' @ 99.0.3 npm as malicious. It is considered malicious because: - The package...