EUVD-2022-29216

Malicious code in bioql PyPI...

EUVD-2023-31709

Malicious code in bioql PyPI...

EUVD-2023-12633

Malicious code in bioql PyPI...

EUVD-2022-35585

Malicious code in bioql PyPI...

EUVD-2023-34017

Malicious code in bioql PyPI...

EUVD-2022-27870

Malicious code in bioql PyPI...

EUVD-2024-37324

Malicious code in bioql PyPI...

EUVD-2025-2002

Malicious code in bioql PyPI...

EUVD-2025-17399

Malicious code in bioql PyPI...

EUVD-2021-9907

Malicious code in bioql PyPI...

EUVD-2021-9843

Malicious code in bioql PyPI...

EUVD-2022-0970

Malicious code in bioql PyPI...

EUVD-2025-4173

Malicious code in bioql PyPI...

EUVD-2024-39142

Malicious code in bioql PyPI...

EUVD-2022-29220

Malicious code in bioql PyPI...

EUVD-2023-58290

Malicious code in bioql PyPI...

EUVD-2022-5856

Malicious code in bioql PyPI...

Security Bulletin: IBM Transformation Extender Advanced stores potentially sensitive information in log files that could be read by a local user.

Summary IBM Transformation Extender Advanced, also known as IBM Standards Processing Engine, stores potentially sensitive information in log files that could be read by a local user. Vulnerability Details CVEID:CVE-2023-50301 DESCRIPTION: IBM Standards Processing Engine stores potentially sensiti...

GHSA-PWF7-47C3-MFHX j178/prek-action vulnerable to arbitrary code injection in composite action

Summary There are three potential attacks of arbitrary code injection vulnerability in the composite action at action.yml. Details The GitHub Action variables inputs.prek-version, inputs.extraargs, and inputs.extra-args can be used to execute arbitrary code in the context of the action. PoC yaml ...

Security Bulletin: A vulnerability has been identified in OPUPI0 AMQP/MQTT (All versions < V5.30).

Summary A vulnerability has been identified in OPUPI0 AMQP/MQTT All versions V5.30. Vulnerability Details CVEID:CVE-2024-31486 DESCRIPTION: A vulnerability has been identified in OPUPI0 AMQP/MQTT All versions V5.30. The affected devices stores MQTT client passwords without sufficient protection o...