EUVD-2024-54693

Malicious code in bioql PyPI...

EUVD-2022-30419

Malicious code in bioql PyPI...

EUVD-2024-35853

Malicious code in bioql PyPI...

EUVD-2025-2737

Malicious code in bioql PyPI...

EUVD-2025-18399

Malicious code in bioql PyPI...

EUVD-2023-45770

Malicious code in bioql PyPI...

EUVD-2024-0006

Malicious code in bioql PyPI...

EUVD-2022-52754

Malicious code in bioql PyPI...

EUVD-2024-33419

Malicious code in bioql PyPI...

EUVD-2022-43329

Malicious code in bioql PyPI...

CVE-2025-59424

LinkAce is a self-hosted archive to collect website links. Prior to 2.3.1, a Stored Cross-Site Scripting XSS vulnerability has been identified on the /system/audit page. The application fails to properly sanitize the username field before it is rendered in the audit log. An authenticated attacker...

CVE-2025-59424 LinkAce Vulnerable to Stored XSS on the Audit Page

LinkAce is a self-hosted archive to collect website links. Prior to 2.3.1, a Stored Cross-Site Scripting XSS vulnerability has been identified on the /system/audit page. The application fails to properly sanitize the username field before it is rendered in the audit log. An authenticated attacker...

CVE-2025-59424 LinkAce Vulnerable to Stored XSS on the Audit Page

LinkAce is a self-hosted archive to collect website links. Prior to 2.3.1, a Stored Cross-Site Scripting XSS vulnerability has been identified on the /system/audit page. The application fails to properly sanitize the username field before it is rendered in the audit log. An authenticated attacker...

ROS-20250912-13

A vulnerability in OpenBao's secret management and encryption system is related to an unexpected normalization in the in the TOTP base library. Exploitation of the vulnerability could allow an attacker to gain access to sensitive data A vulnerability in the OpenBao secret management and encryptio...

Linux Distros Unpatched Vulnerability : CVE-2024-28830

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions 2.3.0p7, 2.2.0p28, 2.1.0p45 and =2.0.0p39 EOL causes automation user secrets...

Malicious code in monolith-twirp-packageregistry-auditlog (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8b1f2e36b99ce4f967ff2e008d0e46e1b498c7d368a334727e1ea28e401529e7 The OpenSSF Package Analysis project identified 'monolith-twirp-packageregistry-auditlog' @ 1.0.2 rubygems as malicious. It is considered...

Linux Distros Unpatched Vulnerability : CVE-2021-28156

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Consul Enterprise version 1.8.0 up to 1.9.4 audit log can be bypassed by specifically crafted HTTP events. Fixed in 1.9.5, and 1.8.10. CVE-2021-28156...

Linux Distros Unpatched Vulnerability : CVE-2019-2741

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Audit Log. Supported versions that are affected are 5.7.26 and prior and 8.0.1...

Improper Access Control

github.com/openbao/openbao is vulnerable to improper access control. The vulnerability is due to the ability of privileged API operators to bypass restrictions on system code execution and network connections through manipulation of audit log prefixes, which allows an attacker to execute...

CVE-2025-54997 OpenBao: Privileged Operator May Execute Code on the Underlying Host

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 2.3.1 and below, some OpenBao deployments intentionally limit privileged API operators from executing system code or making network connections...