EUVD-2023-40738

Malicious code in bioql PyPI...

EUVD-2023-39622

Malicious code in bioql PyPI...

EUVD-2024-53466

Malicious code in bioql PyPI...

EUVD-2024-1910

Malicious code in bioql PyPI...

EUVD-2022-26698

Malicious code in bioql PyPI...

EUVD-2022-26805

Malicious code in bioql PyPI...

EUVD-2022-26807

Malicious code in bioql PyPI...

EUVD-2022-26809

Malicious code in bioql PyPI...

EUVD-2022-26808

Malicious code in bioql PyPI...

EUVD-2022-26806

Malicious code in bioql PyPI...

EUVD-2025-5458

Malicious code in bioql PyPI...

EUVD-2024-18788

Malicious code in bioql PyPI...

EUVD-2023-26289

Malicious code in bioql PyPI...

EUVD-2023-26286

Malicious code in bioql PyPI...

CVE-2025-56572

The finance.js JavaScript library (version 4.1.0 ) is vulnerable to a Denial of Service (DoS) attack. The root cause is the allocation of resources without limits or throttling ; specifically, the seekZero() function lacks iteration limits, and the IRR() function fails to properly handle the dept...

CVE-2025-56572

An issue in finance.js v.4.1.0 allows a remote attacker to cause a denial of service via the seekZero parameter...

CVE-2025-56571

The Finance.js library (v4.1.0) is vulnerable to a Denial of Service (DoS) attack due to a lack of iteration limits. Specifically, the IRR() function's depth parameter and the seekZero() function can be exploited by supplying large values, leading to uncontrolled recursion or excessive CPU usage....

Finance.js 安全漏洞

Finance.js is a JavaScript library for financial calculations by Essam B. Individual Developer. A security vulnerability exists in Finance.js version 4.1.0, which stems from improper handling of the depth parameter of the IRR function and could lead to a denial of service attack...

Bitcoin continues to increase its institutional popularity

Not long ago, the mere idea that cryptocurrencies could ever be integrated into mainstream finance would have seemed…...

Watch Out for Salty2FA: New Phishing Kit Targeting US and EU Enterprises

Phishing-as-a-Service PhaaS platforms keep evolving, giving attackers faster and cheaper ways to break into corporate accounts. Now, researchers at ANY.RUN has uncovered a new entrant: Salty2FA , a phishing kit designed to bypass multiple two-factor authentication methods and slip past traditiona...