EUVD-2022-5564

Malicious code in bioql PyPI...

EUVD-2024-26732

Malicious code in bioql PyPI...

EUVD-2022-4981

Malicious code in bioql PyPI...

EUVD-2025-0193

Malicious code in bioql PyPI...

EUVD-2023-2484

Malicious code in bioql PyPI...

EUVD-2022-3767

Malicious code in bioql PyPI...

EUVD-2022-5090

Malicious code in bioql PyPI...

EUVD-2022-5389

Malicious code in bioql PyPI...

EUVD-2022-5446

Malicious code in bioql PyPI...

EUVD-2024-2695

Malicious code in bioql PyPI...

EUVD-2022-5176

Malicious code in bioql PyPI...

EUVD-2022-3796

Malicious code in bioql PyPI...

EUVD-2022-2736

Malicious code in bioql PyPI...

GHSA-W82P-R9VW-4RG5 WSO2's Input Validation Management Service contains Observable Discrepancy when Multi-Attribute Login is enabled

A username enumeration vulnerability exists in multiple WSO2 products when Multi-Attribute Login is enabled. In this configuration, the system returns a distinct "User does not exist" error message to the login form, regardless of the validateusername setting. This behavior allows malicious actor...

WSO2's Input Validation Management Service contains Observable Discrepancy when Multi-Attribute Login is enabled

A username enumeration vulnerability exists in multiple WSO2 products when Multi-Attribute Login is enabled. In this configuration, the system returns a distinct "User does not exist" error message to the login form, regardless of the validateusername setting. This behavior allows malicious actor...

org.webjars.npm:angular-translate-interpolation-messageformat (>=2.15.2, <=2.19.1) potentially affected by CVE-2025-57349 via org.webjars.npm:messageformat (1.0.2)

org.webjars.npm:messageformat MAVEN version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:messageformat and may be impacted: - org.webjars.npm:angular-translate-interpolation-messageformat =2.15.2, =2.19.1 Source cves:...

marshalsec

It is an offensive tool for Java deserialization vulnerabilities. The repository contains a Java tool called "marshalsec" that exploits Java object deserialization vulnerabilities, allowing for remote code execution. The tool includes payload generators for various Java serialization libraries,...

com.liferay:com.liferay.my.account.web (>=1.0.0, <=1.0.12), com.liferay:com.liferay.portal.settings.web (>=1.0.0, <=1.2.4) potentially affected by CVE-2025-43787 via com.liferay:com.liferay.users.admin.web (>=1.0.0, <=2.3.0)

com.liferay:com.liferay.users.admin.web MAVEN version =1.0.0, =1.0.0, =1.0.0, =1.2.4 Source cves: CVE-2025-43787 Source advisory: SNYK:JAVA-COMLIFERAY-12704859...

Spring Authorization Server moving to Spring Security 7.0

Spring Authorization Server has come a long way since 1.0 was officially released in November 2022. Starting as a project separate from Spring Security, has allowed it to iterate quickly on feature development and ultimately grow a rich feature set for building OAuth2 Authorization Servers. It ha...

Linux Distros Unpatched Vulnerability : CVE-2020-7904

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In JetBrains IntelliJ IDEA before 2019.3, some Maven repositories were accessed via HTTP instead of HTTPS. CVE-2020-7904 Note that Nessus relies on the presence...