EUVD-2021-9546

Malicious code in bioql PyPI...

EUVD-2021-7313

Malicious code in bioql PyPI...

EUVD-2023-25428

Malicious code in bioql PyPI...

EUVD-2022-4386

Malicious code in bioql PyPI...

EUVD-2023-57704

Malicious code in bioql PyPI...

EUVD-2021-7264

Malicious code in bioql PyPI...

EUVD-2025-22910

Malicious code in bioql PyPI...

EUVD-2022-51057

Malicious code in bioql PyPI...

EUVD-2024-38896

Malicious code in bioql PyPI...

EUVD-2022-41621

Malicious code in bioql PyPI...

EUVD-2022-41620

Malicious code in bioql PyPI...

CVE-2025-22431

In multiple locations, there is a possible method for a malicious app to prevent dialing emergency services under limited circumstances due to a logic error in the code. This could lead to local denial of service until the phone reboots with no additional execution privileges needed. User...

CVE-2025-30027

An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a...

CVE-2025-3892

ACAP applications can be executed with elevated privileges, potentially leading to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a maliciou...

PT-2025-32145

Name of the Vulnerable Software and Affected Versions ThrottleStop.sys version 3.0.0.0 ThrottleStop.sys affected versions not specified Description The ThrottleStop.sys driver contains an insecure implementation of the MmMapIoSpace function, which exposes two IOCTL interfaces allowing arbitrary...

CVE-2025-26469

An incorrect default permissions vulnerability exists in the CServerSettings::SetRegistryValues functionality of MedDream PACS Premium 7.3.3.840. A specially crafted application can decrypt credentials stored in a configuration-related registry key. An attacker can execute a malicious script or...

CVE-2024-13917

An application "com.pri.applock", which is pre-loaded on Kruger&Matz smartphones, allows a user to encrypt any application using user-provided PIN code or by using biometric data. Exposed ”com.pri.applock.LockUI“ activity allows any other malicious application, with no granted Android system...

CVE-2024-13916 Exposure of Applications' Encryption PINs in Kruger&Matz AppLock

An application "com.pri.applock", which is pre-loaded on Kruger&Matz smartphones, allows a user to encrypt any application using user-provided PIN code or by using biometric data. Exposed ”com.android.providers.settings.fingerprint.PriFpShareProvider“ content provider's public method query allows...

CVE-2024-13916

CVE-2024-13916 affects pre-installed Krüger&Matz devices with app com.pri.applock. The vulnerability allows exfiltration of the PIN via the public method query() of the content provider com.android.providers.settings.fingerprint.PriFpShareProvider, without requiring Android permissions. The same ...

CVE-2024-45383

A mishandling of IRP requests vulnerability exists in the HDAudBusDMA interface of Microsoft High Definition Audio Bus Driver 10.0.19041.3636 WinBuild.160101.0800. A specially crafted application can issue multiple IRP Complete requests which leads to a local denial-of-service. An attacker can...