EUVD-2022-51593

Malicious code in bioql PyPI...

EUVD-2021-7273

Malicious code in bioql PyPI...

EUVD-2021-7288

Malicious code in bioql PyPI...

EUVD-2021-7248

Malicious code in bioql PyPI...

EUVD-2021-7255

Malicious code in bioql PyPI...

EUVD-2023-27401

Malicious code in bioql PyPI...

EUVD-2021-7277

Malicious code in bioql PyPI...

EUVD-2021-9546

Malicious code in bioql PyPI...

EUVD-2022-27815

Malicious code in bioql PyPI...

EUVD-2024-40005

Malicious code in bioql PyPI...

EUVD-2023-25428

Malicious code in bioql PyPI...

PT-2025-44821

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26 iPadOS versions prior to 26 macOS Sonoma versions prior to 14.8.2 macOS Sequoia versions prior to 15.7.2 tvOS versions prior to 26 watchOS versions prior to 26 visionOS versions prior to 26 Description An out-of-bounds...

CVE-2025-22431

In multiple locations, there is a possible method for a malicious app to prevent dialing emergency services under limited circumstances due to a logic error in the code. This could lead to local denial of service until the phone reboots with no additional execution privileges needed. User...

CVE-2025-30027

An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a...

CVE-2025-3892

ACAP applications can be executed with elevated privileges, potentially leading to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a maliciou...

PT-2025-32145

Name of the Vulnerable Software and Affected Versions ThrottleStop.sys version 3.0.0.0 Description The ThrottleStop.sys driver contains an insecure implementation of the MmMapIoSpace function, which exposes two IOCTL interfaces that allow arbitrary read and write access to physical memory. This...

CVE-2025-26469

An incorrect default permissions vulnerability exists in the CServerSettings::SetRegistryValues functionality of MedDream PACS Premium 7.3.3.840. A specially crafted application can decrypt credentials stored in a configuration-related registry key. An attacker can execute a malicious script or...

CVE-2024-13917

An application "com.pri.applock", which is pre-loaded on Kruger&Matz smartphones, allows a user to encrypt any application using user-provided PIN code or by using biometric data. Exposed ”com.pri.applock.LockUI“ activity allows any other malicious application, with no granted Android system...

CVE-2024-13916 Exposure of Applications' Encryption PINs in Kruger&Matz AppLock

An application "com.pri.applock", which is pre-loaded on Kruger&Matz smartphones, allows a user to encrypt any application using user-provided PIN code or by using biometric data. Exposed ”com.android.providers.settings.fingerprint.PriFpShareProvider“ content provider's public method query allows...

CVE-2024-13916

CVE-2024-13916 affects pre-installed Krüger&Matz devices with app com.pri.applock. The vulnerability allows exfiltration of the PIN via the public method query() of the content provider com.android.providers.settings.fingerprint.PriFpShareProvider, without requiring Android permissions. The same ...