CVE-2025-10678

NetBird VPN vulnerable to an admin account left with a default password after installation via vendor scripts (ZITADEL-created admin). Several sources confirm the issue affects installations using the vendor script and potentially Docker instances if the default password isn’t changed or the user...

NetBird VPN 安全漏洞

NetBird VPN is an open source proxy software from NetBird. A security vulnerability exists in NetBird VPN that stems from the failure to remove or change the default administrator account password created by ZITADEL during installation...

CVE-2025-10678: Use of Default Credentials

NetBird VPN when installed using vendor's provided script failed to remove or change default password of an admin account created by ZITADEL. This issue affects instances installed using vendor's provided script. This issue may affect instances created with Docker if the default password was not...

EUVD-2023-0370

Malicious code in bioql PyPI...

EUVD-2024-0928

Malicious code in bioql PyPI...

EUVD-2025-7787

Malicious code in bioql PyPI...

EUVD-2024-1144

Malicious code in bioql PyPI...

EUVD-2025-8871

Malicious code in bioql PyPI...

EUVD-2022-6533

Malicious code in bioql PyPI...

EUVD-2025-25596

Malicious code in bioql PyPI...

EUVD-2025-16467

Malicious code in bioql PyPI...

EUVD-2024-2921

Malicious code in bioql PyPI...

EUVD-2024-0942

Malicious code in bioql PyPI...

EUVD-2024-0935

Malicious code in bioql PyPI...

EUVD-2024-2416

Malicious code in bioql PyPI...

EUVD-2025-21459

Malicious code in bioql PyPI...

EUVD-2024-2261

Malicious code in bioql PyPI...

EUVD-2024-2965

Malicious code in bioql PyPI...

PT-2025-42771

Name of the Vulnerable Software and Affected Versions NetBird VPN versions prior to 0.57.0 Description NetBird VPN, when installed using the vendor’s provided script, did not remove or change the default password of an admin account created by ZITADEL. This potentially allows for full remote...

CVE-2025-57770

The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. Versions 4.0.0 to 4.0.2, 3.0.0 to 3.3.6, and all versions prior to 2.71.15 are vulnerable to a username enumeration issue in the login interface. The login UI includes a security...