EUVD-2022-4730

Malicious code in bioql PyPI...

EUVD-2022-38119

Malicious code in bioql PyPI...

EUVD-2023-2367

Malicious code in bioql PyPI...

EUVD-2023-1947

Malicious code in bioql PyPI...

EUVD-2022-6774

Malicious code in bioql PyPI...

EUVD-2023-58152

Malicious code in bioql PyPI...

EUVD-2022-6846

Malicious code in bioql PyPI...

EUVD-2023-1200

Malicious code in bioql PyPI...

CVE-2025-48707

An issue was discovered in Stormshield Network Security SNS before 5.0.1. TPM authentication information could, in some HA use cases, be shared among administrators, which can cause secret sharing...

Timing Attack

Overview Affected versions of this package are vulnerable to Timing Attack via the Proxy authentication. An attacker can obtain sensitive authentication information by exploiting differences in response times during password validation. Remediation Upgrade d7y.io/dragonfly/v2/client/daemon/proxy ...

The vulnerability of the NVIDIA NVDebug debugging and diagnostic software tool, related to vulnerabilities in the authentication data protection mechanism, allows attackers to exploit their privileges.

The vulnerability of the NVIDIA NVDebug debugging and diagnostic software lies in the shortcomings of its authentication data protection mechanisms. Exploiting this vulnerability can allow attackers to gain increased privileges...

Plex users: Reset your password!

Media streaming platform Plex has warned customers about a data breach, advising them to reset their password. Plex said an attacker broke into one of its databases, allowing them to access a "limited subset" of customer data. This included email addresses, usernames, hashed passwords, and...

CVE-2025-6737

Securden Unified PAM Remote Vendor Gateway is affected by CVE-2025-6737. The vulnerability stems from shared infrastructure and access tokens across multiple tenants, enabling a malicious actor to obtain authentication material and access the gateway server with low-privilege permissions. Public ...

CVE-2025-55008 AuthKit React Router: Sensitive auth data rendered in HTML

The AuthKit library for React Router 7+ provides helpers for authentication and session management using WorkOS & AuthKit with React Router. In versions 0.6.1 and below, @workos-inc/authkit-react-router exposed sensitive authentication artifacts — specifically sealedSession and accessToken by...

Netwrix Directory Manager 安全漏洞

Netwrix Directory Manager is a group and user management software from Netwrix. A security vulnerability exists in Netwrix Directory Manager versions prior to 11.1.25162.02 that stems from the vulnerability of authentication configuration data to cross-site scripting attacks...

CVE-2025-54395

Netwrix Directory Manager formerly Imanami GroupID 11.0.0.0 before 11.1.25162.02 allows XSS for authentication configuration data...

CVE-2025-54349

A flaw was found in iperf3. An off-by-one error in the iperfauth.c file leads to a heap-based buffer overflow, potentially allowing a network attacker to trigger an application-level denial of service. This overflow occurs during the processing of authentication data. The vulnerability can only b...

The vulnerability of the Universal Plug and Play (UPnP) service in Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the Universal Plug and Play UPnP service in Windows operating systems is related to the use of insecure mechanisms for processing authentication data in the operating system’s memory. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

CVE-2025-49150

Cursor is a code editor built for programming with AI. Prior to 0.51.0, by default, the setting json.schemaDownload.enable was set to True. This means that by writing a JSON file, an attacker can trigger an arbitrary HTTP GET request that does not require user confirmation. Since the Cursor Agent...

Credential Leakage

Requests is vulnerable to credential leakage. The vulnerability is due to a URL parsing issue that may expose .netrc credentials to third parties for specially crafted URLs, allowing attackers to exfiltrate sensitive authentication data...