EUVD-2023-0134

Malicious code in bioql PyPI...

EUVD-2023-58249

Malicious code in bioql PyPI...

EUVD-2023-54529

Malicious code in bioql PyPI...

EUVD-2024-3304

Malicious code in bioql PyPI...

EUVD-2023-46278

Malicious code in bioql PyPI...

EUVD-2023-57819

Malicious code in bioql PyPI...

EUVD-2025-30981

Malicious code in bioql PyPI...

EUVD-2022-1606

Malicious code in bioql PyPI...

EUVD-2022-2476

Malicious code in bioql PyPI...

EUVD-2025-24678

Malicious code in bioql PyPI...

EUVD-2025-24681

Malicious code in bioql PyPI...

EUVD-2025-14673

Malicious code in bioql PyPI...

EUVD-2025-24040

Malicious code in bioql PyPI...

CVE-2025-10306

The Backup Bolt plugin for WordPress is vulnerable to arbitrary file downloads and backup location writes in all versions up to, and including, 1.4.1 via the processbackupbatch function. This makes it possible for authenticated attackers, with Administrator-level access and above, to download...

PT-2025-40471

The Backup Bolt plugin for WordPress is vulnerable to arbitrary file downloads and backup location writes in all versions up to, and including, 1.4.1 via the process backup batch function. This makes it possible for authenticated attackers, with Administrator-level access and above, to download...

CVE-2025-59337 Discourse: Cross-Site Data Exposure via Backup Restore Metacommand Injection in Multisite Deployments

Discourse is an open-source community discussion platform. In versions 3.5.0 and below, malicious meta-commands could be embedded in a backup dump and executed during restore. In multisite setups, this allowed an admin of one site to access data or credentials from other sites. This issue is fixe...

Migration to Unified Veeam Data Cloud FAQ

Below are the most commonly asked questions. What changed with the Veeam Data Cloud for Microsoft 365 experience? Veeam transitioned customers to the Veeam Data Cloud Platform, a unified multi-workload interface. This new experience allows customers to manage Microsoft 365, Entra ID, Salesforce,...

Arbitrary Code Injection

Craft CMS is vulnerable to Arbitrary Code Injection. The vulnerability is due to inadequate protection of restore functionality because, with a compromised security key and the ability to place an arbitrary file in storage/backups, an attacker can craft a request to /updater/restore-db that...

CVE-2025-10360

In Puppet Enterprise versions 2025.4.0 and 2025.5, the encryption key used for encrypting content in the Infra Assistant database was not excluded from the files gathered by Puppet backup. The key is only present on the system if the user has a Puppet Enterprise Advanced license and has enabled t...

CVE-2025-10360

In Puppet Enterprise versions 2025.4.0 and 2025.5, the encryption key used for encrypting content in the Infra Assistant database was not excluded from the files gathered by Puppet backup. The key is only present on the system if the user has a Puppet Enterprise Advanced license and has enabled t...