EUVD-2023-12790

Malicious code in bioql PyPI...

EUVD-2022-32377

Malicious code in bioql PyPI...

EUVD-2023-41391

Malicious code in bioql PyPI...

EUVD-2022-7763

Malicious code in bioql PyPI...

EUVD-2023-31260

Malicious code in bioql PyPI...

EUVD-2023-28544

Malicious code in bioql PyPI...

EUVD-2023-35714

Malicious code in bioql PyPI...

EUVD-2024-42134

Malicious code in bioql PyPI...

EUVD-2025-24178

Malicious code in bioql PyPI...

EUVD-2025-23457

Malicious code in bioql PyPI...

EUVD-2024-53589

Malicious code in bioql PyPI...

The vulnerability of the Delegated License Service (DLS) component of NVIDIA’s licensing system allows a perpetrator to disclose protected information and cause service failures.

The vulnerability of the Delegated License Service DLS component of NVIDIA’s licensing system lies in the lack of authentication for a critical function. Exploiting this vulnerability could allow a malicious actor to disclose protected information and cause service failures...

CVE-2025-11130 iHongRen pptp-vpn XPC Service HelperTool.m shouldAcceptNewConnection missing authentication

A weakness has been identified in iHongRen pptp-vpn 1.0/1.0.1 on macOS. This issue affects the function shouldAcceptNewConnection of the file HelpTool/HelperTool.m of the component XPC Service. This manipulation causes missing authentication. The attack can only be executed locally. The exploit h...

The vulnerability of the DRM/AMD/display components in the Linux operating system allows a hacker to trigger a failure in the system’s authentication process.

The vulnerability of the DRM/AMD/display components in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow a perpetrator to cause a system failure...

Flag Forge 访问控制错误漏洞

Flag Forge is an easy-to-use CTF platform open-sourced by FlagForge. An access control error vulnerability exists in Flag Forge versions 2.0.0 through prior to 2.3.1, which stems from a lack of proper authentication and authorization in the /api/resources endpoint, which could result in an...

Dover Fueling Solutions多款产品 输入验证错误漏洞

Dover Fueling Solutions MAGLINK LX Console and more are products from Dover Fueling Solutions.The Dover Fueling Solutions MAGLINK LX Console is an integrated console for fuel stations and oil distribution. This console is designed to help manage the various operations of a fuel station, including...

CVE-2025-42926

SAP NetWeaver Application Server Java does not perform an authentication check when an attacker attempts to access internal files within the web application.Upon successfully exploitation, an unauthenticated attacker could access these files to gather additional sensitive information about the...

CVE-2025-42958

CVE-2025-42958 affects the SAP NetWeaver application on IBM i-series. A missing authentication check allows highly privileged, unauthorized users to read, modify, or delete sensitive data and access privileged functionality, impacting confidentiality, integrity, and availability. Evidence from mu...

Connection to Veeam Software Appliance Fails With: "Authentication failed: invalid credentials"

Challenge When attempting to use local account credentials to connect to a Veeam Software Appliance that is joined to a domain, the Console fails to connect with the errror: Authentication failed: invalid credentials Cause This error occurs due to an account collision caused by the...

Improper Authentication

Mattermost Confluence Plugin is vulnerable to improper authentication. The vulnerability is due to the failure to enforce user authentication to the Mattermost instance, which allows an attacker to edit channel subscriptions via an unauthenticated API call...