EUVD-2015-8484

Malware in sbrugna...

EUVD-2011-4963

Malware in sbrugna...

EUVD-2013-2110

Malware in sbrugna...

EUVD-2025-21702

Malicious code in bioql PyPI...

EUVD-2025-21693

Malicious code in bioql PyPI...

CVE-2025-40919 Authen::DigestMD5 versions 0.01 through 0.04 for Perl generate the cnonce insecurely

Authen::DigestMD5 versions 0.01 through 0.02 for Perl generate the cnonce insecurely. The cnonce client nonce is generated from an MD5 hash of the PID, the epoch time and the built-in rand function. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not...

CVE-2025-40918

The Authen::SASL::Perl::DIGEST_MD5 component in Authen::SASL::Perl (versions 2.04 through 2.1800) insecurely generates the cnonce (client nonce). The vulnerability stems from using an MD5 hash of the PID , epoch time , and the built-in rand function, which is unsuitable for cryptographic use. Bec...

CVE-2024-52322

WebService::Xero 0.11 and earlier for Perl uses the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically WebService::Xero uses the Data::Random library which specifically states that it is "Useful mostly for test programs...

CVE-2024-57868

The Web::API Perl module (version 2.8 and earlier ) is vulnerable because it uses the rand() function as the default source of entropy for cryptographic functions. This is insecure because Web::API relies on the Data::Random library, which is explicitly intended for test programs rather than prod...

CVE-2025-30673

Sub::HandlesVia for Perl before 0.050002 allows untrusted code from the current working directory '.' to be loaded similar to CVE-2016-1238. If an attacker can place a malicious file in current working directory, it may be loaded instead of the intended file, potentially leading to arbitrary code...

CVE-2025-1805 Crypt::Salt for Perl uses insecure rand() function when generating salts for cryptographic purposes

Crypt::Salt for Perl version 0.01 uses insecure rand function when generating salts for cryptographic purposes...

CVE-2014-10401

An issue was discovered in the DBI module before 1.632 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the fdir attribute...

CVE-2015-8607

The canonpath function in the File::Spec module in PathTools before 3.62, as used in Perl, does not properly preserve the taint attribute of data, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string...