EUVD-2022-53088

Malicious code in bioql PyPI...

EUVD-2023-25034

Malicious code in bioql PyPI...

EUVD-2022-53100

Malicious code in bioql PyPI...

EUVD-2022-53089

Malicious code in bioql PyPI...

EUVD-2021-9205

Malicious code in bioql PyPI...

EUVD-2022-53102

Malicious code in bioql PyPI...

EUVD-2021-9203

Malicious code in bioql PyPI...

EUVD-2021-9155

Malicious code in bioql PyPI...

EUVD-2021-9202

Malicious code in bioql PyPI...

EUVD-2022-53103

Malicious code in bioql PyPI...

EUVD-2022-53101

Malicious code in bioql PyPI...

EUVD-2023-25035

Malicious code in bioql PyPI...

CVE-2023-20856

VMware vRealize Operations vROps contains a CSRF bypass vulnerability. A malicious user could execute actions on the vROps platform on behalf of the authenticated victim user...

CVE-2021-22033

Releases prior to VMware vRealize Operations 8.6 contain a Server Side Request Forgery SSRF vulnerability...

CVE-2021-22034

Releases prior to VMware vRealize Operations Tenant App 8.6 contain an Information Disclosure Vulnerability...

CVE-2020-3953

Cross Site Scripting XSS vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input validation...

CVE-2020-3954

Open Redirect vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input validation...

SaltStack Salt Master Server Root Key Disclosure

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SaltStack Salt Master Server Root Key Disclosure', 'Description' = %q This module exploits unauthenticated access to the prepauthinfo method in t...

Vmware vRealize Network Insight Command Injection

Vmware vRealize Network Insight version 6.2 6.10 are vulnerable to a Command Injection vulnerability. A remote unauthenticated attacker can perform remote code execution via a specially crafted request. No source data...

VMware vRealize Network Insight (vRNI) Multiple Vulnerabilities (VMSA-2022-0031)

According to its self-reported version, the instance of VMware vRealize Network Insight running on the remote web server is affected by multiple vulnerabilities: - vRealize Network Insight vRNI contains a command injection vulnerability present in the vRNI REST API. A malicious actor with network...