Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986715)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986715 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/ipoib: Fix warning caused by destroying non-initial netns After the commit 5ce2dced8e95...

EUVD-2025-30938

Malicious code in bioql PyPI...

EUVD-2022-28856

Malicious code in bioql PyPI...

EUVD-2023-49542

Malicious code in bioql PyPI...

EUVD-2025-19823

Malicious code in bioql PyPI...

EUVD-2024-22995

Malicious code in bioql PyPI...

EUVD-2022-55612

Malicious code in bioql PyPI...

EUVD-2025-31638

Malicious code in bioql PyPI...

EUVD-2024-37190

Malicious code in bioql PyPI...

EUVD-2022-46499

Malicious code in bioql PyPI...

EUVD-2024-55006

Malicious code in bioql PyPI...

EUVD-2025-32002

Malicious code in bioql PyPI...

EUVD-2025-27717

Malicious code in bioql PyPI...

Detour Dog Caught Running DNS-Powered Malware Factory for Strela Stealer

A threat actor named Detour Dog has been outed as powering campaigns distributing an information stealer known as Strela Stealer. That's according to findings from Infoblox, which found the threat actor to maintain control of domains hosting the first stage of the stealer, a backdoor called...

CVE-2025-34223

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 VA/SaaS deployments contain a default admin account and an installation‑time endpoint at /admin/query/updatedatabase.php that can be accessed without authentication. An...

CVE-2025-34223 Vasion Print (formerly PrinterLogic) Insecure Installation Credentials

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 VA/SaaS deployments contain a default admin account and an installation‑time endpoint at /admin/query/updatedatabase.php that can be accessed without authentication. An...

CVE-2025-34223

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 VA/SaaS deployments contain a default admin account and an installation‑time endpoint at /admin/query/updatedatabase.php that can be accessed without authentication. An...

CVE-2025-34223

CVE-2025-34223 affects Vasion Print Virtual Appliance Host (pre-22.0.1049) and Vasion Print Application (pre-20.0.2786). An unauthenticated attacker can reach an installation-time endpoint at /admin/query/update_database.php, submit arbitrary root_user/root_password values, and replace the defaul...

PT-2025-39888

Name of the Vulnerable Software and Affected Versions Vasion Print versions prior to 22.0.1049 Vasion Print Application versions prior to 20.0.2786 Description The Vasion Print Virtual Appliance Host and Application contain a default admin account and an installation-time endpoint at...

CVE-2025-58069

The use of a hard-coded cryptographic key was discovered in firmware version 3.60 of the Click Plus PLC. The vulnerability relies on the fact that the software contains a hard-coded AES key used to protect the initial messages of a new KOPS session...