EUVD-2000-0147

Malware in sbrugna...

EUVD-2020-15792

Malware in sbrugna...

EUVD-2009-1900

Malware in sbrugna...

EUVD-2006-0850

Malware in sbrugna...

EUVD-2022-28682

Malicious code in bioql PyPI...

EUVD-2024-2103

Malicious code in bioql PyPI...

EUVD-2023-27550

Malicious code in bioql PyPI...

EUVD-2024-35208

Malicious code in bioql PyPI...

EUVD-2025-4298

Malicious code in bioql PyPI...

EUVD-2022-52328

Malicious code in bioql PyPI...

EUVD-2025-14289

Malicious code in bioql PyPI...

EUVD-2025-23897

Malicious code in bioql PyPI...

extloader

extLoader A small toolkit for managing and deploying unpacked...

CVE-2025-57815

Fides is an open-source privacy engineering platform. Prior to version 2.69.1, the Fides Admin UI login endpoint relies on a general IP-based rate limit for all API traffic and lacks specific anti-automation controls designed to protect against brute-force attacks. This could allow attackers to...

CVE-2025-54999

OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 0.1.0 through 2.3.1, when using OpenBao's userpass auth method, user enumeration was possible due to timing difference between non-existent users an...

The vulnerability of the user blocking mechanism of the Vault Enterprise and Vault Community Edition corporate information archiving platforms allows attackers to circumvent existing security restrictions.

The vulnerability of the user blocking mechanism in the Vault Enterprise and Vault Community Edition corporate information archiving platforms is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to circumvent existing security...

CVE-2025-49195

CVE-2025-49195 describes a vulnerability where an FTP server login mechanism does not limit authentication attempts, enabling brute-force password guessing. Connected sources associate this issue with SICK Field Analytics and SICK Media Server products. The CVE is tracked in NVD/Red Hat/CVE recor...

CVE-2024-5684

An attacker with access to the private network the charger is connected to or local access to the Ethernet-Interface can exploit a faulty implementation of the JWT-library in order to bypass the password authentication to the web configuration interface and then has full access as the user would...

CVE-2024-35143

IBM Planning Analytics Local 2.0 and 2.1 connects to a MongoDB server. MongoDB, a document-oriented database system, is listening on the remote port, and it is configured to allow connections without password authentication. A remote attacker can gain unauthorized access to the database. IBM...

CVE-2020-35208

An issue was discovered in the LogMein LastPass Password Manager aka com.lastpass.ilastpass app 4.8.11.2403 for iOS. The password authentication for unlocking can be bypassed by forcing the authentication result to be true through runtime manipulation. In other words, an attacker could authentica...