EUVD-2025-13657

Malicious code in bioql PyPI...

EUVD-2022-6849

Malicious code in bioql PyPI...

EUVD-2025-28786

Malicious code in bioql PyPI...

EUVD-2024-47503

Malicious code in bioql PyPI...

EUVD-2023-44344

Malicious code in bioql PyPI...

EUVD-2024-30283

Malicious code in bioql PyPI...

EUVD-2022-28180

Malicious code in bioql PyPI...

EUVD-2023-42310

Malicious code in bioql PyPI...

EUVD-2023-52869

Malicious code in bioql PyPI...

EUVD-2024-49735

Malicious code in bioql PyPI...

EUVD-2024-30281

Malicious code in bioql PyPI...

EUVD-2025-6881

Malicious code in bioql PyPI...

EUVD-2022-4245

Malicious code in bioql PyPI...

EUVD-2024-0995

Malicious code in bioql PyPI...

PT-2025-40610

LiteLLM Information health API KEY Information Disclosure Vulnerability...

CVE-2025-59405

The Flock Safety Peripheral com.flocksafety.android.peripheral application 7.38.3 for Android installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices contains a cleartext DataDog API key within in its codebase. Because application binaries can be trivially decompil...

CVE-2025-59405

The Flock Safety Peripheral com.flocksafety.android.peripheral application 7.38.3 for Android installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices contains a cleartext DataDog API key within in its codebase. Because application binaries can be trivially decompil...

CVE-2025-10360

In Puppet Enterprise versions 2025.4.0 and 2025.5, the encryption key used for encrypting content in the Infra Assistant database was not excluded from the files gathered by Puppet backup. The key is only present on the system if the user has a Puppet Enterprise Advanced license and has enabled t...

CVE-2025-10360

CVE-2025-10360 affects Puppet Enterprise 2025.4.0 and 2025.5, where the encryption key for the Infra Assistant database was not excluded from files collected by Puppet backup. The key is present only for users with an Infra Assistant license and feature enabled, and it protects the API key for th...

CVE-2025-10360 Insufficiently Protected Credentials in Puppet Enterprise 2025.4 and 2025.5

In Puppet Enterprise versions 2025.4.0 and 2025.5, the encryption key used for encrypting content in the Infra Assistant database was not excluded from the files gathered by Puppet backup. The key is only present on the system if the user has a Puppet Enterprise Advanced license and has enabled t...