EUVD-2025-4643

Malicious code in bioql PyPI...

EUVD-2025-16212

Malicious code in bioql PyPI...

EUVD-2022-44538

Malicious code in bioql PyPI...

EUVD-2024-21373

Malicious code in bioql PyPI...

EUVD-2022-40294

Malicious code in bioql PyPI...

EUVD-2023-55021

Malicious code in bioql PyPI...

EUVD-2022-0249

Malicious code in bioql PyPI...

EUVD-2023-2561

Malicious code in bioql PyPI...

EUVD-2025-24628

Malicious code in bioql PyPI...

EUVD-2025-24166

Malicious code in bioql PyPI...

EUVD-2023-35512

Malicious code in bioql PyPI...

EUVD-2025-25388

Malicious code in bioql PyPI...

EUVD-2022-45543

Malicious code in bioql PyPI...

Missing Authentication for Critical Function

Overview litellm is a Library to easily interface with LLM API providers Affected versions of this package are vulnerable to Missing Authentication for Critical Function via sensitive in-memory cache debug endpoints. An unauthenticated attacker can access sensitive cached information by accessing...

CVE-2025-41716

The web application allows an unauthenticated remote attacker to learn information about existing user accounts with their corresponding role due to missing authentication for critical function...

CVE-2025-41716

The web application allows an unauthenticated remote attacker to learn information about existing user accounts with their corresponding role due to missing authentication for critical function...

CVE-2025-41716

CVE-2025-41716 describes an unauthenticated information disclosure where a remote attacker can enumerate existing user accounts and their roles due to missing authentication for a critical function. Connected sources reference WAGO Device Sphere and WAGO Solution Builder as affected, describing a...

PT-2025-39238

Name of the Vulnerable Software and Affected Versions Web Application affected versions not specified Description The web application has a flaw that allows an unauthenticated remote attacker to gather information about existing user accounts, including their roles, due to a lack of authenticatio...

The vulnerability of the GFIAgent software service, a network filtering tool from Kerio Control, allows a hacker to gain full access to the device.

The vulnerability of the GFIAgent software, a network filtering tool from Kerio Control, is related to the lack of authentication for a critical function. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain full access to the device with administrator privileges...

GO-2025-3951 Chaos Mesh's Chaos Controller Manager is Missing Authentication for Critical Function in github.com/chaos-mesh/chaos-mesh

Chaos Mesh's Chaos Controller Manager is Missing Authentication for Critical Function in github.com/chaos-mesh/chaos-mesh. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positiv...