373 matches found
Lanscope Endpoint Manager (On-Premises) vulnerable to improper verification of source of a communication channel
Overview Lanscope Endpoint Manager On-Premises provided by MOTEX Inc. contains the following vulnerability. Improper verification of source of a communication channel CWE-940 - CVE-2025-61932 MOTEX Inc. reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and...
go-witness is Vulnerable to Improper Verification of AWS EC2 Identity Documents
Impact This vulnerability only affects users of the AWS attestor. Users of the AWS attestor could have unknowingly received a forged identity document. While this may seem unlikely, AWS recently issued a security bulletin about IMDS Instance Metadata Service impersonation.^1 There are multiple...
CVE-2025-62375
The CVE describes an improper verification in the AWS attestor used by go-witness and witness. In affected versions, the attestor can accept forged AWS EC2 instance identity documents when a signature is absent/empty or RSA verification fails, and it relies on a legacy global AWS certificate inst...
CVE-2025-62375 go-witness Improper Verification of AWS EC2 Identity Documents
go-witness and witness are Go modules for generating attestations. In go-witness versions 0.8.6 and earlier and witness versions 0.9.2 and earlier the AWS attestor improperly verifies AWS EC2 instance identity documents. Verification can incorrectly succeed when a signature is not present or is...
Improper Verification of Cryptographic Signature
Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature when the spark.network.crypto.enabled is true and the cipher is not explicitly configured, resulting in the use of AES in CTR mode without authentication. An attacker can compromise the...
EUVD-2021-23572
Malware in sbrugna...
EUVD-2021-23618
Malware in sbrugna...
EUVD-2020-0226
Malware in sbrugna...
EUVD-2021-23617
Malware in sbrugna...
EUVD-2017-11341
Malware in sbrugna...
EUVD-2021-23574
Malware in sbrugna...
EUVD-2022-7746
Malicious code in bioql PyPI...
EUVD-2025-26509
Malicious code in bioql PyPI...
EUVD-2024-15812
Malicious code in bioql PyPI...
EUVD-2021-9594
Malicious code in bioql PyPI...
EUVD-2024-18585
Malicious code in bioql PyPI...
EUVD-2024-42795
Malicious code in bioql PyPI...
EUVD-2021-9465
Malicious code in bioql PyPI...