EUVD-2023-43205

Malicious code in bioql PyPI...

EUVD-2025-22392

Malicious code in bioql PyPI...

EUVD-2024-41566

Malicious code in bioql PyPI...

EUVD-2022-3048

Malicious code in bioql PyPI...

EUVD-2022-33672

Malicious code in bioql PyPI...

EUVD-2023-41732

Malicious code in bioql PyPI...

EUVD-2023-42334

Malicious code in bioql PyPI...

EUVD-2025-19931

Malicious code in bioql PyPI...

EUVD-2023-41731

Malicious code in bioql PyPI...

EUVD-2024-19662

Malicious code in bioql PyPI...

EUVD-2023-27442

Malicious code in bioql PyPI...

EUVD-2022-46887

Malicious code in bioql PyPI...

EUVD-2021-2885

Malicious code in bioql PyPI...

EUVD-2024-42136

Malicious code in bioql PyPI...

Large RSA keys can cause high CPU usage in crypto/tls

...

CVE-2022-38692

In BootROM, there is a missing size check for RSA keys in Certificate Type 0 validation. This could lead to memory buffer overflow without requiring additional execution privileges...

CVE-2025-56577

An issue in Evope Core v.1.1.3.20 allows a local attacker to obtain sensitive information via the use of hard coded cryptographic keys...

Use of Hard-coded Cryptographic Key

Overview Affected versions of this package are vulnerable to Use of Hard-coded Cryptographic Key in the form of AuthSecretKey, StateSecretKey, and OAuthTokenSecretKey as defined in aes.go, which are used when generating the callback URL for OAuth authentication. Remediation Upgrade...

CVE-2025-9604 coze-studio aes.go hard-coded key

A vulnerability was identified in coze-studio up to 0.2.4. The impacted element is an unknown function of the file backend/domain/plugin/encrypt/aes.go. The manipulation of the argument AuthSecretKey/StateSecretKey/OAuthTokenSecretKey leads to use of hard-coded cryptographic key . It is possible ...

CVE-2025-56577

CVE-2025-56577 describes a vulnerability in Evope Core v1.1.3.20 where a local attacker can obtain sensitive information due to the use of hard-coded cryptographic keys. The available connected sources corroborate the affected product/version and the cryptographic-key issue, with CVSSv3.1 base sc...