EUVD-2025-31361

Malicious code in bioql PyPI...

EUVD-2023-2746

Malicious code in bioql PyPI...

EUVD-2023-32978

Malicious code in bioql PyPI...

EUVD-2025-14785

Malicious code in bioql PyPI...

EUVD-2023-36454

Malicious code in bioql PyPI...

EUVD-2023-35242

Malicious code in bioql PyPI...

EUVD-2025-10406

Malicious code in bioql PyPI...

EUVD-2025-24036

Malicious code in bioql PyPI...

EUVD-2022-2584

Malicious code in bioql PyPI...

EUVD-2024-16164

Malicious code in bioql PyPI...

EUVD-2021-9296

Malicious code in bioql PyPI...

EUVD-2023-12110

Malicious code in bioql PyPI...

EUVD-2024-24409

Malicious code in bioql PyPI...

EUVD-2025-26238

Malicious code in bioql PyPI...

RLSA-2025:9079 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ndisc: use RCU protection in ndiscallocskb CVE-2025-21764 kernel: ovl: fix UAF in ovldentryupdatereval by moving dput in ovllinkup CVE-2025-21887 kernel: keys: Fix UAF in keyput...

CVE-2025-34210

Vasion Print formerly PrinterLogic Virtual Appliance Host and Application VA/SaaS deployments store a large number of sensitive credentials database passwords, MySQL root password, SaaS keys, Portainer admin password, etc. in cleartext files that are world-readable. Any local user - or any proces...

CVE-2025-34210

The CVE concerns Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA/SAAS deployments). The connected sources confirm that sensitive credentials (database passwords, MySQL root password, SaaS keys, Portainer admin password, etc.) are stored in cleartext files that are ...

Microsoft 365 Direct Send Abuse

The Rapid7 MDR team has observed a significant rise in the number of threat actors leveraging a lesser-known feature within Microsoft 365 called Direct Send. Rapid7 encourages organizations to immediately review their authenticated mail flow configurations, specifically related to Microsoft 365...

Malicious code in affected-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d28082ed059e68e9aeb19f28b4d928db94d6f5392467f2fd362a468fd93bb6e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Poscube Assist 信任管理问题漏洞

Poscube Assist is a mobile reporting tool from Poscube Turkey. A trust management issue vulnerability exists in Poscube Assist version 10.02.2025 and earlier, which stems from bypassing authorization using hard-coded credentials and user control keys, which could lead to authentication bypass...