EUVD-2018-11246

Malware in sbrugna...

EUVD-2020-0242

Malware in sbrugna...

EUVD-2024-38303

Malicious code in bioql PyPI...

EUVD-2022-4943

Malicious code in bioql PyPI...

EUVD-2025-24000

Malicious code in bioql PyPI...

EUVD-2025-10876

Malicious code in bioql PyPI...

EUVD-2021-28629

Malicious code in bioql PyPI...

EUVD-2022-1939

Malicious code in bioql PyPI...

EUVD-2022-2773

Malicious code in bioql PyPI...

CVE-2025-20133

A vulnerability in the management and VPN web servers of the Remote Access SSL VPN feature of Cisco Secure Firewall ASA Software and Secure FTD Software could allow an unauthenticated, remote attacker to cause the device to unexpectedly stop responding, resulting in a DoS condition. This...

CVE-2025-20133

The CVE-2025-20133 issue affects Cisco Secure Firewall ASA/FTD Remote Access SSL VPN authentication. The vulnerability stems from ineffective validation of user-supplied input during the Remote Access SSL VPN authentication process. An unauthenticated, remote attacker could send a crafted request...

CVE-2025-37111

CVE-2025-37111 affects the HPE Telco Network Function Virtual Orchestrator. The issue is a vulnerability in the storage policy for certain sets of authentication keys, enabling unauthorized parties to gain access to sensitive system information. The CVSSv3.1 vector indicates Local attack vector, ...

CVE-2025-7574

A vulnerability, which was classified as critical, was found in LB-LINK BL-AC1900, BL-AC2100AZ3, BL-AC3600, BL-AX1800, BL-AX5400P and BL-WR9000 up to 20250702. Affected is the function reboot/restore of the file /cgi-bin/lighttpd.cgi of the component Web Interface. The manipulation leads to...

PT-2025-28345 · Phoenix Contact · Charx Sec-3000 +7

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An unauthenticated adjacent attacker can modify configuration by sending specific requests to an "API-endpoint" resulting in read and write access due to missing authentication...

CVE-2025-6796 Marvell QConvergeConsole getAppFileBytes Directory Traversal Information Disclosure Vulnerability

Marvell QConvergeConsole getAppFileBytes Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Marvell QConvergeConsole. Authentication is not required to exploit this vulnerability. The...

PT-2025-24427 · Lucky · Lucky Lm-520-Fsc +2

Name of the Vulnerable Software and Affected Versions: Lucky LM-520-SC, LM-520-FSC and LM-520-FSC-SAM up to 20250321 Description: A vulnerability classified as problematic was found in the affected devices, leading to missing authentication. The manipulation can be launched remotely, and the...

CVE-2024-11668

An issue has been discovered in GitLab CE/EE affecting all versions from 16.11 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1. Long-lived connections could potentially bypass authentication controls, allowing unauthorized access to streaming results...

CVE-2023-39981

A vulnerability that allows for unauthorized access has been discovered in MXsecurity versions prior to v1.0.1. This vulnerability arises from inadequate authentication measures, potentially leading to the disclosure of device information by a remote attacker...

CVE-2021-41615

websda.c in GoAhead WebServer 2.1.8 has insufficient nonce entropy because the nonce calculation relies on the hardcoded onceuponatimeinparadise value, which does not follow the secret-data guideline for HTTP Digest Access Authentication in RFC 7616 section 3.3 or RFC 2617 section 3.2.1. NOTE:...

CVE-2018-13908

Truncated access authentication token leads to weakened access control for stored secure application data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon...