3113 matches found
EUVD-2024-37741
Malicious code in bioql PyPI...
EUVD-2021-28175
Malicious code in bioql PyPI...
EUVD-2022-48091
Malicious code in bioql PyPI...
EUVD-2025-27373
Malicious code in bioql PyPI...
EUVD-2025-22008
Malicious code in bioql PyPI...
EUVD-2025-24994
Malicious code in bioql PyPI...
EUVD-2021-30758
Malicious code in bioql PyPI...
EUVD-2021-29084
Malicious code in bioql PyPI...
EUVD-2021-8647
Malicious code in bioql PyPI...
EUVD-2022-48092
Malicious code in bioql PyPI...
EUVD-2022-36039
Malicious code in bioql PyPI...
EUVD-2022-30914
Malicious code in bioql PyPI...
EUVD-2023-53216
Malicious code in bioql PyPI...
EUVD-2024-20962
Malicious code in bioql PyPI...
EUVD-2023-43242
Malicious code in bioql PyPI...
BIT-POWERSHELL-2025-49734 PowerShell Direct Elevation of Privilege Vulnerability
Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate privileges locally...
Alert: Malicious PyPI Package soopsocks Infects 2,653 Systems Before Takedown
Cybersecurity researchers have flagged a malicious package on the Python Package Index PyPI repository that claims to offer the ability to create a SOCKS5 proxy service, while also providing a stealthy backdoor-like functionality to drop additional payloads on Windows systems. The deceptive...
New COLDRIVER Malware Campaign Joins BO Team and Bearlyfy in Russia-Focused Cyberattacks
The Russian advanced persistent threat APT group known as COLDRIVER has been attributed to a fresh round of ClickFix-style attacks designed to deliver two new "lightweight" malware families tracked as BAITSWITCH and SIMPLEFIX. Zscaler ThreatLabz, which detected the new multi-stage ClickFix campai...
Zscaler Client Connector < 4.2.1 Improper Preservation of Permissions (CVE-2024-23464)
The version of Zscaler Client Connector installed on the remote Windows host is prior to 4.2.1. It is, therefore, affected by a vulnerability. - In certain cases, Zscaler Internet Access ZIA can be disabled by PowerShell commands with admin rights. This affects Zscaler Client Connector on Windows...
CVE-2025-59270
psPAS PowerShell module does not explicitly enforce TLS 1.2 within the 'Get-PASSAMLResponse' function during the SAML authentication process. An unauthenticated attacker in a 'Man-in-the-Middle' position could manipulate the TLS handshake and downgrade TLS to a deprecated protocol. Fixed in 7.0.2...