EUVD-2023-29822

Malicious code in bioql PyPI...

EUVD-2024-49398

Malicious code in bioql PyPI...

EUVD-2024-28393

Malicious code in bioql PyPI...

EUVD-2024-45787

Malicious code in bioql PyPI...

EUVD-2025-23529

Malicious code in bioql PyPI...

EUVD-2025-11506

Malicious code in bioql PyPI...

EUVD-2025-11508

Malicious code in bioql PyPI...

EUVD-2022-42860

Malicious code in bioql PyPI...

EUVD-2025-21705

Malicious code in bioql PyPI...

EUVD-2023-36712

Malicious code in bioql PyPI...

EUVD-2024-20003

Malicious code in bioql PyPI...

EUVD-2024-47715

Malicious code in bioql PyPI...

EUVD-2023-57971

Malicious code in bioql PyPI...

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-10.0.1.4)

The version of AHV installed on the remote host is prior to 10.0.1.4. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-10.0.1.4 advisory. - There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number...

GHSA-WM7X-WW72-R77Q Information Disclosure in Amazon ECS Container Agent

Summary Amazon Elastic Container Service Amazon ECS is a fully managed container orchestration service that enables customers to deploy, manage, and scale containerized applications. Amazon ECS container agent provides an introspection API that provides information about the overall state of the...

CVE-2025-9039 Information Disclosure in Amazon ECS Container Agent

We identified an issue in the Amazon ECS agent where, under certain conditions, an introspection server could be accessed off-host by another instance if the instances are in the same security group or if their security groups allow incoming connections that include the port where the server is...

CVE-2025-9039 Information Disclosure in Amazon ECS Container Agent

We identified an issue in the Amazon ECS agent where, under certain conditions, an introspection server could be accessed off-host by another instance if the instances are in the same security group or if their security groups allow incoming connections that include the port where the server is...

PT-2025-33310

Name of the Vulnerable Software and Affected Versions: Amazon ECS agent versions 0.0.3 through 1.97.0 Description: An issue was identified in the Amazon ECS agent where, under certain conditions, an introspection server could be accessed off-host by another instance if the instances are in the sa...

Medium: ecs-init

Issue Overview: Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation. This only affected certificate chains which contain policy graphs, which are rather uncommon. CVE-2025-22874 Proxy-Authorization and Proxy-Authenticate headers...

Researchers Uncover ECScape Flaw in Amazon ECS Enabling Cross-Task Credential Theft

Cybersecurity researchers have demonstrated an "end-to-end privilege escalation chain" in Amazon Elastic Container Service ECS that could be exploited by an attacker to conduct lateral movement, access sensitive data, and seize control of the cloud environment. The attack technique has been...