EUVD-2023-12941

Malicious code in bioql PyPI...

EUVD-2022-30392

Malicious code in bioql PyPI...

EUVD-2021-6699

Malicious code in bioql PyPI...

EUVD-2022-7046

Malicious code in bioql PyPI...

EUVD-2022-5395

Malicious code in bioql PyPI...

EUVD-2024-48578

Malicious code in bioql PyPI...

EUVD-2025-16167

Malicious code in bioql PyPI...

EUVD-2024-34675

Malicious code in bioql PyPI...

EUVD-2025-13912

Malicious code in bioql PyPI...

EUVD-2024-25836

Malicious code in bioql PyPI...

EUVD-2022-3382

Malicious code in bioql PyPI...

EUVD-2024-2332

Malicious code in bioql PyPI...

EUVD-2023-26543

Malicious code in bioql PyPI...

EUVD-2023-34221

Malicious code in bioql PyPI...

Logo TigerWings ERP 安全漏洞

Logo TigerWings ERP is an enterprise resource management software from Logo Turkey. A security vulnerability exists in Logo TigerWings ERP version 01.01.00 through versions prior to 3.03.00, which stems from the use of hard-coded credentials and could result in reading sensitive constants in an...

PT-2025-40517

Name of the Vulnerable Software and Affected Versions Logo Software Inc. TigerWings ERP versions 01.01.00 through 3.02.99 Description The software contains a Use of Hard-coded Credentials issue, allowing for the reading of sensitive constants within the executable. Recommendations Update to versi...

Canonical LXD Arbitrary File Read via Template Injection in Snapshot Patterns

Impact In LXD's instance snapshot creation functionality, the Pongo2 template engine is used in the snapshots.pattern configuration for generating snapshot names. While code execution functionality has not been found in this template engine, it has file reading capabilities, creating a...

Traccar 安全漏洞

Traccar is a Java-based website builder that provides GPS tracking capabilities from Traccar, Inc. in the United States. The software supports more than 170 GPS protocols and more than 1500 models of GPS tracking devices.Traccar can be used with any major SQL database system. It also provides an...

A week in security (September 22 – September 28)

Last week on Malwarebytes Labs: Hackers threaten parents: Get nursery to pay ransom or we leak your child’s data Google and Flo to pay $56 million after misusing users’ health data Neon App pays users to record their phone calls, sells data for AI training updated New SVG-based phishing campaign ...

The vulnerability of the st.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the st.c component in the Linux operating system’s kernel is related to reading data beyond the allowable buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure...