EUVD-2024-29728

Malicious code in bioql PyPI...

EUVD-2022-2379

Malicious code in bioql PyPI...

EUVD-2024-1670

Malicious code in bioql PyPI...

EUVD-2022-6502

Malicious code in bioql PyPI...

EUVD-2022-52752

Malicious code in bioql PyPI...

EUVD-2022-52754

Malicious code in bioql PyPI...

EUVD-2024-3270

Malicious code in bioql PyPI...

EUVD-2024-32048

Malicious code in bioql PyPI...

EUVD-2025-30308

Malicious code in bioql PyPI...

EUVD-2024-38222

Malicious code in bioql PyPI...

EUVD-2023-42513

Malicious code in bioql PyPI...

User Enumeration

mautic/core is vulnerable to user enumeration. The vulnerability is due to differing response times between valid and invalid usernames, which allows an attacker to enumerate valid accounts and subsequently attempt brute-force attacks...

CVE-2025-8679

In ExtremeGuest Essentials before 25.5.0, captive-portal may permit unauthorized access via manual brute-force procedure. Under certain ExtremeGuest Essentials captive-portal SSID configurations, repeated manual login attempts may allow an unauthenticated device to be marked as authenticated and...

CVE-2025-8679 ExtremeGuest Essentials Captive Portal Unauthenticated Brute Force

In ExtremeGuest Essentials before 25.5.0, captive-portal may permit unauthorized access via manual brute-force procedure. Under certain ExtremeGuest Essentials captive-portal SSID configurations, repeated manual login attempts may allow an unauthenticated device to be marked as authenticated and...

CVE-2025-8679 ExtremeGuest Essentials Captive Portal Unauthenticated Brute Force

In ExtremeGuest Essentials before 25.5.0, captive-portal may permit unauthorized access via manual brute-force procedure. Under certain ExtremeGuest Essentials captive-portal SSID configurations, repeated manual login attempts may allow an unauthenticated device to be marked as authenticated and...

CVE-2025-8679

CVE-2025-8679 affects ExtremeGuest Essentials prior to 25.5.0. The captive-portal can permit unauthorized access through a manual brute-force process; under certain captive-portal SSID configurations, repeated login attempts may cause an unauthenticated device to be marked as authenticated and gr...

CVE-2025-8118

PAD CMS implements weak client-side brute-force protection by utilizing two cookies: logincount and logintimeout. Information about attempt count or timeout is not stored on the server, which allows a malicious attacker to bypass this brute-force protection by resetting those cookies. This issue...

CVE-2025-56132

LiquidFiles filetransfer server is vulnerable to a user enumeration issue in its password reset functionality. The application returns distinguishable responses for valid and invalid email addresses, allowing unauthenticated attackers to determine the existence of user accounts. Version 4.2...

PT-2025-40280

Name of the Vulnerable Software and Affected Versions ExtremeGuest Essentials versions prior to 25.5.0 Description The captive-portal feature may allow unauthorized access through manual brute-force attempts. Specific ExtremeGuest Essentials captive-portal SSID configurations could allow an...

VMware NSX Weak Password Recovery Mechanism Vulnerability

VMware NSX is a network virtualization solution within VMware Cloud Foundation that enables administrators to deploy legacy and modern applications in a private/hybrid cloud.VMware Cloud Foundation is an all-in-one hybrid cloud platform from VMware, Inc. The platform includes features such as...