EUVD-2022-37810

Malicious code in bioql PyPI...

CVE-2022-34906

A hard-coded cryptographic key is used in FileWave before 14.6.3 and 14.7.x before 14.7.2. Exploitation could allow an unauthenticated actor to decrypt sensitive information saved in FileWave, and even send crafted requests...

CVE-2025-43922

CVE-2025-43922 affects the FileWave Windows client prior to 16.0.0. In non-default configurations, an unprivileged local user can escalate to SYSTEM. The vulnerability is documented across multiple feeds; the basic impact is local privilege escalation with high severity (CVSS 3.1: LOCAL, NONE/CON...

FileWave Trust Management Vulnerability

FileWave is an endpoint management suite from the Swiss company FileWave. FileWave suffers from a security vulnerability that originates from the fact that an unauthenticated attacker can decrypt sensitive information stored in FileWave using a hard-coded encryption key, or even send a crafted...