EUVD-2023-54356

Malicious code in bioql PyPI...

EUVD-2023-37430

Malicious code in bioql PyPI...

EUVD-2022-40542

Malicious code in bioql PyPI...

EUVD-2025-6300

Malicious code in bioql PyPI...

EUVD-2022-29460

Malicious code in bioql PyPI...

EUVD-2025-23417

Malicious code in bioql PyPI...

EUVD-2021-29505

Malicious code in bioql PyPI...

CVE-2025-57516

CVE-2025-57516: OS command injection in PublicCMS versions 5.202506.a and 5.202506.b. The vulnerability arises from processing crafted DATABASE, USERNAME, or PASSWORD variables passed to backupDB.bat, enabling arbitrary command execution. Affected documentation from multiple sources confirms the ...

firefox: thunderbird: Incorrect URL stripping in CSP reports

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: The username:password part is incorrectly stripped from URLs in CSP reports, potentially leaking HTTP Basic Authentication credentials...

firefox: thunderbird: Incorrect URL stripping in CSP reports

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: The username:password part is incorrectly stripped from URLs in CSP reports, potentially leaking HTTP Basic Authentication credentials...

firefox: thunderbird: Incorrect URL stripping in CSP reports

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: The username:password part is incorrectly stripped from URLs in CSP reports, potentially leaking HTTP Basic Authentication credentials...

firefox: thunderbird: Incorrect URL stripping in CSP reports

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: The username:password part is incorrectly stripped from URLs in CSP reports, potentially leaking HTTP Basic Authentication credentials...

CVE-2025-54999

CVE-2025-54999 affects OpenBao (versions 0.1.0–2.3.1) via the userpass authentication method, enabling user enumeration due to timing differences between non-existent users and those with credentials. This timing side-channel is independent of credential validity. The issue is fixed in version 2....

CVE-2025-8530 elunez eladmin Druid application-prod.yml default credentials

A vulnerability, which was classified as problematic, has been found in elunez eladmin up to 2.7. Affected by this issue is some unknown functionality of the file eladmin-system\src\main\resources\config\application-prod.yml of the component Druid. The manipulation of the argument...

CVE-2025-6077

Partner Software's Partner Software Product and corresponding Partner Web application use the same default username and password for the administrator account across all versions...

CVE-2025-6077

Partner Software's Partner Software Product and corresponding Partner Web application use the same default username and password for the administrator account across all versions...

CVE-2025-6077

CVE-2025-6077 concerns Partner Software’s Partner Software Product and Partner Web application, where the administrator account uses the same default username and password across all versions. Multiple sources confirm the issue can enable unauthorized admin access and, per CERT/industry notes, ma...

CVE-2025-6077 CVE-2025-6077

Partner Software's Partner Software Product and corresponding Partner Web application use the same default username and password for the administrator account across all versions...

PT-2025-31719 · Partner · Partner Web Application +1

Name of the Vulnerable Software and Affected Versions: Partner Software Product affected versions not specified Partner Web application affected versions not specified Description: Partner Software’s Partner Software Product and corresponding Partner Web application utilize the same default...

firefox: thunderbird: Incorrect URL stripping in CSP reports

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: The username:password part is incorrectly stripped from URLs in CSP reports, potentially leaking HTTP Basic Authentication credentials...