EUVD-2001-1091

Malware in sbrugna...

EUVD-2001-0264

Malware in sbrugna...

EUVD-2007-2355

Malware in sbrugna...

EUVD-2005-1580

Malware in sbrugna...

EUVD-2019-18046

Malware in sbrugna...

EUVD-2025-14619

Malicious code in bioql PyPI...

EUVD-2023-27639

Malicious code in bioql PyPI...

EUVD-2025-27234

Malicious code in bioql PyPI...

EUVD-2021-7215

Malicious code in bioql PyPI...

EUVD-2022-31273

Malicious code in bioql PyPI...

EUVD-2023-27613

Malicious code in bioql PyPI...

EUVD-2023-52743

Malicious code in bioql PyPI...

EUVD-2025-14625

Malicious code in bioql PyPI...

SpecialFolderDatablock - Windows LNK File Special UNC Path NTLM Leak

This module creates a malicious Windows shortcut LNK file that specifies a special UNC path in SpecialFolderDatablock of Shell Link .LNK that can trigger an authentication attempt to a remote server. This can be used to harvest NTLM authentication credentials. When a victim browse to the location...

CVE-2025-40804

A vulnerability has been identified in SIMATIC Virtualization as a Service SIVaaS All versions. The affected application exposes a network share without any authentication. This could allow an attacker to access or alter sensitive data without proper authorization...

CVE-2025-40804

CVE-2025-40804 concerns Siemens’ SIMATIC Virtualization as a Service (SIVaaS). Affected: all versions; root cause is an unauthenticated network share exposed by the application, enabling an attacker to access or alter sensitive data without authorization. CVSS metrics from listed sources: v3.1 ba...

CVE-2025-40804

A vulnerability has been identified in SIMATIC Virtualization as a Service SIVaaS All versions. The affected application exposes a network share without any authentication. This could allow an attacker to access or alter sensitive data without proper authorization...

CVE-2025-40804

A vulnerability has been identified in SIMATIC Virtualization as a Service SIVaaS All versions. The affected application exposes a network share without any authentication. This could allow an attacker to access or alter sensitive data without proper authorization...

PT-2025-36687

Name of the Vulnerable Software and Affected Versions: SIMATIC Virtualization as a Service SIVaaS affected versions not specified Description: The affected application exposes a network share without any authentication. This could allow an attacker to access or alter sensitive data without proper...

Siemens SIMATIC Virtualization as a Service (SIVaaS)

SUMMARY SIMATIC Virtualization as a Service SIVaaS is affected by a vulnerability which exposes a network share without any authentication. This could allow an attacker to access or alter sensitive data without proper authorization. Siemens recommends to contact technical support to fix the...