EUVD-2011-1430

Malware in sbrugna...

EUVD-2016-3202

Malware in sbrugna...

EUVD-2011-2501

Malware in sbrugna...

EUVD-2015-3494

Malware in sbrugna...

EUVD-2024-3208

Malicious code in bioql PyPI...

EUVD-2023-30091

Malicious code in bioql PyPI...

EUVD-2022-1980

Malicious code in bioql PyPI...

EUVD-2023-1397

Malicious code in bioql PyPI...

EUVD-2024-0159

Malicious code in bioql PyPI...

EUVD-2022-1656

Malicious code in bioql PyPI...

EUVD-2024-1944

Malicious code in bioql PyPI...

EUVD-2022-5522

Malicious code in bioql PyPI...

EUVD-2023-2836

Malicious code in bioql PyPI...

EUVD-2023-1401

Malicious code in bioql PyPI...

EUVD-2022-4142

Malicious code in bioql PyPI...

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Apache XML Security for Java.

Summary Multiple vulnerabilities in Apache XML Security for Java that is used by IBM InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2024-20945 DESCRIPTION: An unspecified vulnerability in Java SE related to the VM component could allow a local authenticated attacker...

BIT-NIFI-2023-22832 Apache NiFi: Improper Restriction of XML External Entity References in ExtractCCDAAttributes

The ExtractCCDAAttributes Processor in Apache NiFi 1.2.0 through 1.19.1 does not restrict XML External Entity references. Flow configurations that include the ExtractCCDAAttributes Processor are vulnerable to malicious XML documents that contain Document Type Declarations with XML External Entity...

Linux Distros Unpatched Vulnerability : CVE-2024-34580

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache XML Security for C++ through 2.0.4 implements the XML Signature Syntax and Processing XMLDsig specification without protection against an SSRF payload in...

DBeaver parseDocument XXE

The vulnerability of the parseDocument function of the cross-platform tool for working with DBeaver databases is related to an error in restricting XML references to external objects. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information...

CVE-2025-54380 Opencast still publishes global system account credentials

Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to version 17.6, Opencast would incorrectly send the hashed global system account credentials ie: org.opencastproject.security.digest.user and org.opencastproject.security.digest.pass...