EUVD-2025-19125

Malicious code in bioql PyPI...

EUVD-2023-27859

Malicious code in bioql PyPI...

EUVD-2023-31703

Malicious code in bioql PyPI...

EUVD-2025-24943

Malicious code in bioql PyPI...

EUVD-2023-40490

Malicious code in bioql PyPI...

EUVD-2024-54362

Malicious code in bioql PyPI...

EUVD-2023-49878

Malicious code in bioql PyPI...

EUVD-2025-7761

Malicious code in bioql PyPI...

EUVD-2022-42354

Malicious code in bioql PyPI...

EUVD-2024-43269

Malicious code in bioql PyPI...

EUVD-2024-49539

Malicious code in bioql PyPI...

EUVD-2022-51617

Malicious code in bioql PyPI...

Insufficient Verification of Data Authenticity

Overview Affected versions of this package are vulnerable to Insufficient Verification of Data Authenticity via the SAML authentication component. An attacker can obtain authentication tokens belonging to another user by crafting a phishing login URL containing attacker-controlled publicKey and...

CVE-2024-13990

MicroWorld eScan AV's update mechanism failed to ensure authenticity and integrity of updates: update packages were delivered and accepted without robust cryptographic verification. As a result, an on-path attacker could perform a man-in-the-middle MitM attack and substitute malicious update...

CVE-2024-13990

MicroWorld eScan AV’s update mechanism lacked cryptographic verification, allowing an on-path attacker to perform a MITM and substitute malicious update payloads. The affected component (update loader/installer payloads) could be executed or loaded, enabling remote code execution on vulnerable sy...

CVE-2024-13990 MicroWorld eScan AV Insecure Update Mechanism Allows Man-in-the-Middle Replacement of Updates

MicroWorld eScan AV's update mechanism failed to ensure authenticity and integrity of updates: update packages were delivered and accepted without robust cryptographic verification. As a result, an on-path attacker could perform a man-in-the-middle MitM attack and substitute malicious update...

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to insufficient verification of data authenticity, allowing attackers to trigger service failures.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to insufficient verification of data authenticity. Exploiting these vulnerabilities can allow a malicious actor to cause service failures remotely...

Linux Distros Unpatched Vulnerability : CVE-2020-23906

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg N-98388-g76a3ee996b allows attackers to cause a denial of service DoS via a crafted audio file due to insufficient verification of data authenticity...

CVE-2025-9379

A vulnerability was determined in Belkin AX1800 1.1.00.016. Affected by this vulnerability is an unknown functionality of the component Firmware Update Handler. This manipulation causes insufficient verification of data authenticity. The attack can be initiated remotely. The vendor was contacted...

CVE-2025-9379

A vulnerability was determined in Belkin AX1800 1.1.00.016. Affected by this vulnerability is an unknown functionality of the component Firmware Update Handler. This manipulation causes insufficient verification of data authenticity. The attack can be initiated remotely. The vendor was contacted...