EUVD-2024-41577

Malicious code in bioql PyPI...

EUVD-2025-19655

Malicious code in bioql PyPI...

EUVD-2023-1546

Malicious code in bioql PyPI...

EUVD-2021-9837

Malicious code in bioql PyPI...

EUVD-2022-2625

Malicious code in bioql PyPI...

EUVD-2023-2751

Malicious code in bioql PyPI...

EUVD-2024-48631

Malicious code in bioql PyPI...

EUVD-2022-6253

Malicious code in bioql PyPI...

EUVD-2022-4430

Malicious code in bioql PyPI...

EUVD-2022-4401

Malicious code in bioql PyPI...

EUVD-2022-4541

Malicious code in bioql PyPI...

CVE-2025-34210

Vasion Print formerly PrinterLogic Virtual Appliance Host and Application VA/SaaS deployments store a large number of sensitive credentials database passwords, MySQL root password, SaaS keys, Portainer admin password, etc. in cleartext files that are world-readable. Any local user - or any proces...

CVE-2025-59745

Vulnerability in the cryptographic algorithm of AndSoft's e-TMS v25.03, which uses MD5 to encrypt passwords. MD5 is a cryptographically vulnerable hash algorithm and is no longer considered secure for storing or transmitting passwords. It is vulnerable to collision attacks and can be easily crack...

VMware Aria Operations Information Disclosure Vulnerability

VMware Aria Operations is a unified, artificial intelligence-driven, self-driving IT operations management platform for private, hybrid and multi-cloud environments from VMware. VMware Aria Operations has a security vulnerability that could be exploited by an attacker to disclose other users'...

CVE-2025-34233

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 VA/SaaS deployments contain a protection mechanism failure vulnerability within the filegetcontents function. When an administrator configures a printer’s hostname or...

CVE-2025-10879

All versions of Dingtian DT-R002 are vulnerable to an Insufficiently Protected Credentials vulnerability that could allow an attacker to retrieve the current user's username without authentication...

PT-2025-39703

Name of the Vulnerable Software and Affected Versions IBM Storage TS4500 Library versions 1.11.0.0 and 2.11.0.0 Description The IBM Storage TS4500 Library is susceptible to a cross-site scripting issue. An unauthenticated attacker can inject arbitrary JavaScript code into the Web UI, potentially...

CVE-2025-10360 Insufficiently Protected Credentials in Puppet Enterprise 2025.4 and 2025.5

In Puppet Enterprise versions 2025.4.0 and 2025.5, the encryption key used for encrypting content in the Infra Assistant database was not excluded from the files gathered by Puppet backup. The key is only present on the system if the user has a Puppet Enterprise Advanced license and has enabled t...

CVE-2025-47698

An adjacent attacker without authentication can exploit this vulnerability to retrieve a set of user-privileged credentials. These credentials are present during the firmware upgrade procedure...

CVE-2025-34200

Vasion Print formerly PrinterLogic Virtual Appliance Host and Application VA and SaaS deployments provision the appliance with the network account credentials in clear-text inside /etc/issue, and the file is world-readable by default. An attacker with local shell access can read /etc/issue to...