EUVD-2025-201881

A vulnerability exists in the SecOps SOAR server. The custom integrations feature allowed an authenticated user with an "IDE role" to achieve Remote Code Execution RCE in the server. The flaw stemmed from weak validation of uploaded Python package code. An attacker could upload a package containi...

Changing the physics of cyber defense

The Deputy CISO blog series is whereMicrosoft Deputy Chief Information Security Officers CISOs share their thoughts on what is most important in their respective domains. In this series, you will get practical advice, tactics to start and stop deploying, forward-looking commentary on where the...

CVE-2025-13428 RCE in SecOps SOAR server via user-provided Python packages

A vulnerability exists in the SecOps SOAR server. The custom integrations feature allowed an authenticated user with an "IDE role" to achieve Remote Code Execution RCE in the server. The flaw stemmed from weak validation of uploaded Python package code. An attacker could upload a package containi...

EUVD-2024-48493

Malicious code in bioql PyPI...

EUVD-2024-47124

Malicious code in bioql PyPI...

EUVD-2024-47123

Malicious code in bioql PyPI...

EUVD-2024-47126

Malicious code in bioql PyPI...

EUVD-2025-27633

Malicious code in bioql PyPI...

EUVD-2025-1978

Malicious code in bioql PyPI...

EUVD-2024-48465

Malicious code in bioql PyPI...

EUVD-2024-50298

Malicious code in bioql PyPI...

EUVD-2024-48495

Malicious code in bioql PyPI...

EUVD-2024-48494

Malicious code in bioql PyPI...

EUVD-2024-47125

Malicious code in bioql PyPI...

EUVD-2024-47128

Malicious code in bioql PyPI...

EUVD-2024-47127

Malicious code in bioql PyPI...

EUVD-2024-47129

Malicious code in bioql PyPI...

EUVD-2024-48491

Malicious code in bioql PyPI...

CVE-2025-9918

A Path Traversal vulnerability in the archive extraction component in Google SecOps SOAR Server versions 6.3.54.0, 6.3.53.2, and all prior versions allows an authenticated attacker with permissions to import Use Cases to achieve Remote Code Execution RCE via uploading a malicious ZIP archive...

CVE-2025-9918

A Path Traversal vulnerability in the archive extraction component in Google SecOps SOAR Server versions 6.3.54.0, 6.3.53.2, and all prior versions allows an authenticated attacker with permissions to import Use Cases to achieve Remote Code Execution RCE via uploading a malicious ZIP archive...