304 matches found
EUVD-2017-0560
Malware in sbrugna...
EUVD-2016-0219
Malware in sbrugna...
EUVD-2017-10283
Malware in sbrugna...
EUVD-2017-10421
Malware in sbrugna...
EUVD-2024-40339
Malicious code in bioql PyPI...
EUVD-2025-27143
Malicious code in bioql PyPI...
EUVD-2023-23458
Malicious code in bioql PyPI...
EUVD-2024-24642
Malicious code in bioql PyPI...
EUVD-2025-19815
Malicious code in bioql PyPI...
EUVD-2025-1981
Malicious code in bioql PyPI...
EUVD-2024-19018
Malicious code in bioql PyPI...
Microsoft Windows inconsistent driver blocking
RISK EVALUATION Microsoft Windows Defender Application Control WDAC and the Microsoft vulnerable driver blocklist do not adequately block known-vulnerable drivers. These unexpected behaviors can confuse users about whether or not driver blocking is working and which drivers are being blocked. 2...
CVE-2025-59033
The Microsoft vulnerable driver block list is implemented as Windows Defender Application Control WDAC policy. Entries that specify only the to-be-signed TBS part of the code signer certificate are properly blocked, but entries that specify the signing certificate's TBS hash along with a...
CVE-2025-59033
The Microsoft vulnerable driver block list is implemented as Windows Defender Application Control WDAC policy. Entries that specify only the to-be-signed TBS part of the code signer certificate are properly blocked, but entries that specify the signing certificate's TBS hash along with a...
PT-2025-36478
Name of the Vulnerable Software and Affected Versions: Windows versions affected versions not specified Description: The Microsoft vulnerable driver block list, implemented as Windows Defender Application Control WDAC policy, does not properly block entries specifying the signing certificate’s TB...
CVE-2025-59033
The Microsoft vulnerable driver block list is implemented as Windows Defender Application Control WDAC policy. Entries that specify only the to-be-signed TBS part of the code signer certificate are properly blocked, but entries that specify the signing certificate's TBS hash along with a...
Malicious code in alpha-rqf-project (npm)
The package alpha-rqf-project was found to contain malicious code...
CVE-2025-54583
GitProxy (finos/git-proxy) vulnerability CVE-2025-54583 affects version 1.19.1 and earlier; 1.19.2 fixes the issue. The flaw allows pushing to a remote repository while bypassing policy checks and explicit approvals when multiple branches are pushed, enabling code that should be blocked (e.g., se...
GitProxy Approval Bypass When Pushing Multiple Branches
Summary This vulnerability allows a user to push to the remote repository while bypassing policies and explicit approval. Since checks and plugins are skipped, code containing secrets or unwanted changes could be pushed into a repository. Because it can allow policy violations to go undetected, w...
GHSA-QR93-8WWF-22G4 GitProxy Approval Bypass When Pushing Multiple Branches
Summary This vulnerability allows a user to push to the remote repository while bypassing policies and explicit approval. Since checks and plugins are skipped, code containing secrets or unwanted changes could be pushed into a repository. Because it can allow policy violations to go undetected, w...