EUVD-2022-25130

Malicious code in bioql PyPI...

EUVD-2022-25145

Malicious code in bioql PyPI...

EUVD-2021-8576

Malicious code in bioql PyPI...

EUVD-2025-15275

Malicious code in bioql PyPI...

EUVD-2025-25151

Malicious code in bioql PyPI...

EUVD-2025-23213

Malicious code in bioql PyPI...

EUVD-2025-23817

Malicious code in bioql PyPI...

EUVD-2025-23896

Malicious code in bioql PyPI...

EUVD-2025-21879

Malicious code in bioql PyPI...

EUVD-2025-27506

Malicious code in bioql PyPI...

EUVD-2022-51556

Malicious code in bioql PyPI...

EUVD-2024-29371

Malicious code in bioql PyPI...

EUVD-2021-8563

Malicious code in bioql PyPI...

EUVD-2024-53295

Malicious code in bioql PyPI...

EUVD-2022-42488

Malicious code in bioql PyPI...

NiceGUI 跨站脚本漏洞

NiceGUI is an easy-to-use, Python-based UI framework open-sourced by NiceGUI. A cross-site scripting vulnerability exists in NiceGUI 2.24.2 and earlier versions that stems from not enforcing HTML or JavaScript cleanup, which could lead to cross-site scripting attacks...

CVE-2025-61595 MANTRA tx gas limit is not enforced in send hooks

MANTRA is a purpose-built RWA Layer 1 Blockchain, capable of adherence to real world regulatory requirements. Versions 4.0.1 and below do not enforce the tx gas limit in its send hooks. Send hooks can spend more gas than what remains in tx, combined with recursive calls in the wasm contract,...

Operation Cronos and the Takedown of LockBit: A Cybersecurity Milestone

Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Introduction LockBit aka ABCD Ransomware, one of the most destructive ransomware groups in history, was dismantled in early 2024 through a...

CVE-2025-56449

A security vulnerability was identified in Obsidian Scheduler's REST API 5.0.0 thru 6.3.0. If an account is locked out due to not enrolling in MFA e.g. after the 7-day enforcement window, the REST API still allows the use of Basic Authentication to authenticate and perform administrative actions...

Sex offenders, terrorists, drug dealers, exposed in spyware breach

We've covered spyware and stalkerware leaks many times before, but we don't often see such exposure in software used by law enforcement. According to a report by Straight Arrow News SAN, the hacker “wikkid” said the intrusion against RemoteCOM was “one of the easiest” they’d ever carried out...