EUVD-2025-10696

Malicious code in bioql PyPI...

EUVD-2025-22038

Malicious code in bioql PyPI...

EUVD-2024-41744

Malicious code in bioql PyPI...

EUVD-2024-0182

Malicious code in bioql PyPI...

EUVD-2025-27711

Malicious code in bioql PyPI...

EUVD-2023-24033

Malicious code in bioql PyPI...

EUVD-2022-34963

Malicious code in bioql PyPI...

EUVD-2025-21058

Malicious code in bioql PyPI...

EUVD-2024-3074

Malicious code in bioql PyPI...

EUVD-2025-25387

Malicious code in bioql PyPI...

EUVD-2022-3611

Malicious code in bioql PyPI...

EUVD-2024-15888

Malicious code in bioql PyPI...

EUVD-2025-13950

Malicious code in bioql PyPI...

EUVD-2025-25046

Malicious code in bioql PyPI...

CVE-2025-10217

A vulnerability exists in Asset Suite for an authenticated user to manipulate the content of performance related log data or to inject crafted data in logfile for potentially carrying out further malicious attacks. Performance logging is typically enabled for troubleshooting purposes while...

Race condition in xterm allows local users to modify arbitrary files via the logging option.

...

Important: Red Hat Security Advisory: Logging for Red Hat OpenShift - 5.8.22

Logging for Red Hat OpenShift - 5.8.22 Red Hat OpenShift Logging 5.8.22 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs...

CVE-2025-10217

A vulnerability exists in Asset Suite for an authenticated user to manipulate the content of performance related log data or to inject crafted data in logfile for potentially carrying out further malicious attacks. Performance logging is typically enabled for troubleshooting purposes while...

PT-2025-39981

Name of the Vulnerable Software and Affected Versions Asset Suite affected versions not specified Description An authenticated user can manipulate performance-related log data or inject crafted data into logfiles. This could potentially enable further malicious attacks. Performance logging is...

curl: AWS SigV4 Signature Disclosure via Verbose Logging in libcurl

Summary When libcurl is built with AWS SigV4 support, enabling verbose logging CURLOPTVERBOSE or --verbose causes the library to print both the string-to-sign and the final HMAC signature into logs. Because signatures remain valid for several minutes and are derived directly from AWS credentials,...