EUVD-2023-2736

Malicious code in bioql PyPI...

EUVD-2022-7457

Malicious code in bioql PyPI...

EUVD-2021-28835

Malicious code in bioql PyPI...

EUVD-2025-28572

Malicious code in bioql PyPI...

EUVD-2025-29847

Malicious code in bioql PyPI...

EUVD-2024-2737

Malicious code in bioql PyPI...

EUVD-2024-0114

Malicious code in bioql PyPI...

EUVD-2024-1104

Malicious code in bioql PyPI...

EUVD-2024-1239

Malicious code in bioql PyPI...

EUVD-2023-36805

Malicious code in bioql PyPI...

EUVD-2023-42309

Malicious code in bioql PyPI...

EUVD-2022-43113

Malicious code in bioql PyPI...

Exploit for CVE-2025-9242

watchTowr-vs-WatchGuard-CVE-2025-9242 Detection Artifact Gene...

Forensic journey: hunting evil within AmCache

Introduction When it comes to digital forensics, AmCache plays a vital role in identifying malicious activities in Windows systems. This artifact allows the identification of the execution of both benign and malicious software on a machine. It is managed by the operating system, and at the time o...

Widespread Supply Chain Compromise Impacting npm Ecosystem

CISA is releasing this Alert to provide guidance in response to a widespread software supply chain compromise involving the world’s largest JavaScript registry, npmjs.com. A self-replicating worm—publicly known as “Shai-Hulud”—has compromised over 500 packages.i After gaining initial access, the...

GHSA-M79R-R765-5F9J Lobe Chat Desktop vulnerable to Remote Code Execution via XSS in Chat Messages

Summary We identified a cross-site scripting XSS vulnerability when handling chat message in lobe-chat that can be escalated to remote code execution on the user’s machine. Any party capable of injecting content into chat messages, such as hosting a malicious page for prompt injection, operating ...

CVE-2025-59417

Lobe Chat is an open-source artificial intelligence chat framework. Prior to version 1.129.4, there is a a cross-site scripting XSS vulnerability when handling chat message in lobe-chat that can be escalated to remote code execution on the user’s machine. In lobe-chat, when the response from the...

Linux Distros Unpatched Vulnerability : CVE-2019-14954

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JetBrains IntelliJ IDEA before 2019.2 was resolving the markdown plantuml artifact download link via a cleartext http connection. CVE-2019-14954 Note that Nessu...

Linux Distros Unpatched Vulnerability : CVE-2022-30324

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Nomad and Nomad Enterprise version 0.2.0 up to 1.3.0 were impacted by go-getter vulnerabilities enabling privilege escalation through the artifact...

Linux Distros Unpatched Vulnerability : CVE-2022-41606

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Nomad and Nomad Enterprise 1.0.2 up to 1.2.12, and 1.3.5 jobs submitted with an artifact stanza using invalid S3 or GCS URLs can be used to crash clie...