966 matches found
EUVD-2022-2883
Malicious code in bioql PyPI...
EUVD-2022-3934
Malicious code in bioql PyPI...
EUVD-2025-12580
Malicious code in bioql PyPI...
EUVD-2023-26911
Malicious code in bioql PyPI...
EUVD-2024-42814
Malicious code in bioql PyPI...
EUVD-2025-16144
Malicious code in bioql PyPI...
EUVD-2021-29037
Malicious code in bioql PyPI...
EUVD-2024-19106
Malicious code in bioql PyPI...
EUVD-2024-30647
Malicious code in bioql PyPI...
EUVD-2023-36950
Malicious code in bioql PyPI...
EUVD-2025-4283
Malicious code in bioql PyPI...
EUVD-2024-42701
Malicious code in bioql PyPI...
CVE-2025-59343
tar-fs provides filesystem bindings for tar-stream. Versions prior to 3.1.1, 2.1.3, and 1.16.5 are vulnerable to symlink validation bypass if the destination directory is predictable with a specific tarball. This issue has been patched in version 3.1.1, 2.1.4, and 1.16.6. A workaround involves...
Police using drones to read your license plates, warns EFF
Police are using drones as flying automated license plate readers ALPRs, according to a report by the Electronic Frontier Foundation EFF. And where there is a market, a provider will jump in. Or was it the other way around this time? Flock Safety, for example, recently told a group of potential l...
Lawsuit About WhatsApp Security
Attaullah Baig, WhatsApp's former head of security, has filed a whistleblower lawsuit alleging that Facebook deliberately failed to fix a bunch of security flaws, in violation of its 2019 settlement agreement with the Federal Trade Commission. The lawsuit, alleging violations of the whistleblower...
AI-Powered Villager Pen Testing Tool Hits 11,000 PyPI Downloads Amid Abuse Concerns
A new artificial intelligence AI-powered penetration testing tool linked to a China-based company has attracted nearly 11,000 downloads on the Python Package Index PyPI repository, raising concerns that it could be repurposed by cybercriminals for malicious purposes. Dubbed Villager, the framewor...
Nexar dashcam video database hacked
A hacker cracked into a database of video recordings taken from Nexar-branded cameras, which are built to be placed drivers’ cars, according to a new report from 404 Media. Nexar is a dashcam company that promotes its products as “virtual CCTV cameras” and offers automatic cloud uploads of critic...
CVE-2025-55190
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. In versions 2.13.0 through 2.13.8, 2.14.0 through 2.14.15, 3.0.0 through 3.0.12 and 3.1.0-rc1 through 3.1.1, API tokens with project-level permissions are able to retrieve sensitive repository credentials usernames, passwor...
