EUVD-2025-29699

Malicious code in bioql PyPI...

EUVD-2025-24855

Malicious code in bioql PyPI...

EUVD-2025-24585

Malicious code in bioql PyPI...

EUVD-2024-3230

Malicious code in bioql PyPI...

EUVD-2025-24845

Malicious code in bioql PyPI...

EUVD-2024-46857

Malicious code in bioql PyPI...

EUVD-2025-19232

Malicious code in bioql PyPI...

EUVD-2023-2214

Malicious code in bioql PyPI...

EUVD-2024-0061

Malicious code in bioql PyPI...

EUVD-2023-0651

Malicious code in bioql PyPI...

EUVD-2025-24844

Malicious code in bioql PyPI...

Hitachi Energy Asset Suite (Update A)

RISK EVALUATION Successful exploitation of this vulnerability could result in the manipulation of content or the injection of data with the potential of carrying out further malicious attacks. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of...

OpenPLC_V3

RISK EVALUATION Successful exploitation of this vulnerability could cause a denial of service, making the PLC runtime process crash. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network...

MegaSys Enterprises Telenium Online Web Application

RISK EVALUATION Successful exploitation of this vulnerability could allow an unauthenticated attacker to inject arbitrary operating system commands through a crafted HTTP request, leading to remote code execution on the server in the security context of the web application service account. 2...

A week in security (September 22 – September 28)

Last week on Malwarebytes Labs: Hackers threaten parents: Get nursery to pay ransom or we leak your child’s data Google and Flo to pay $56 million after misusing users’ health data Neon App pays users to record their phone calls, sells data for AI training updated New SVG-based phishing campaign ...

CVE-2025-11130

Summary : CVE-2025-11130 affects iHongRen pptp-vpn on macOS, specifically the XPC Service component’s file HelpTool/HelperTool.m. The vulnerability resides in the function shouldAcceptNewConnection, which allows a local attacker to bypass authentication due to missing authentication checks. Publi...

CVE-2025-11130 iHongRen pptp-vpn XPC Service HelperTool.m shouldAcceptNewConnection missing authentication

A weakness has been identified in iHongRen pptp-vpn 1.0/1.0.1 on macOS. This issue affects the function shouldAcceptNewConnection of the file HelpTool/HelperTool.m of the component XPC Service. This manipulation causes missing authentication. The attack can only be executed locally. The exploit h...

CVE-2025-20333

A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to improper...

CVE-2025-20362

Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Software or Cisco Secure FTD Software releases that are affected by CVE-2025-20333 and CVE-2025-20362. This attack can cause unpatched devices to unexpectedly reload, leading to denial...

Cisco Secure Firewall Adaptive Security Appliance VPN Web Server Remote Code Execution (cisco-sa-asaftd-webvpn-z5xP8EUB)

According to its self-reported version, Cisco Secure Firewall Adaptive Security Appliance ASA Software is affected by a vulnerability: - A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software...