Qlik Sense Enterprise - HTTP Request Smuggling

An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows a remote attacker to elevate their privilege by tunnelin...

Qlik Sense Enterprise - Path Traversal Detection

A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows an unauthenticated remote attacker to generate an anonymous...

Qlik Sense Enterprise Information Disclosure

The vulnerability of the Qlik Sense Enterprise data analysis platform is related to the leakage of information about files and directories. Exploiting this vulnerability can allow an intruder operating remotely to gain unauthorized access to protected information...

EUVD-2025-198363

Qlik Sense Enterprise v14.212.13 was discovered to contain an information leak via the /dev-hub/ directory...

CVE-2025-61138

Qlik Sense Enterprise v14.212.13 was discovered to contain an information leak via the /dev-hub/ directory...

CVE-2025-61138

Qlik Sense Enterprise v14.212.13 was discovered to contain an information leak via the /dev-hub/ directory...

CVE-2025-61138: Insertion of Sensitive Information into Externally-Accessible File or Directory

Qlik Sense Enterprise v14.212.13 was discovered to contain an information leak via the /dev-hub/ directory...

Qlik Sense Enterprise security vulnerabilities

Qlik Sense Enterprise is a data analytics platform from Qlik USA. A security vulnerability exists in Qlik Sense Enterprise version v14.212.13, which originates in the /dev-hub/ directory could lead to information disclosure...

CVE-2025-61138

Qlik Sense Enterprise v14.212.13 was discovered to contain an information leak via the /dev-hub/ directory...

PT-2025-47638

Name of the Vulnerable Software and Affected Versions Qlik Sense Enterprise version 14.212.13 Description An information leak exists through the ''/dev-hub/'' directory. Recommendations Restrict access to the ''/dev-hub/'' directory...

CVE-2025-61138

Qlik Sense Enterprise v14.212.13 was discovered to contain an information leak via the /dev-hub/ directory...

CVE-2025-61138

Qlik Sense Enterprise version v14.212.13 is affected by an information leak vulnerability located in the /dev-hub/ directory. This flaw allows a remote attacker to gain unauthorized access to protected information by exploiting the leakage of details regarding files and directories. To mitigate t...

EUVD-2021-23349

Malware in sbrugna...

EUVD-2019-3298

Malware in sbrugna...

EUVD-2022-15683

Malicious code in bioql PyPI...

EUVD-2024-52817

Malicious code in bioql PyPI...

EUVD-2024-52816

Malicious code in bioql PyPI...

EUVD-2024-35876

Malicious code in bioql PyPI...

Malicious Package

Overview @secsol5g/qlik-sense is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malware in @secsol5g/qlik-sense

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...