12951 matches found
EUVD-2023-0829
Malicious code in bioql PyPI...
EUVD-2025-17850
Malicious code in bioql PyPI...
EUVD-2023-2084
Malicious code in bioql PyPI...
EUVD-2023-2594
Malicious code in bioql PyPI...
EUVD-2022-24980
Malicious code in bioql PyPI...
EUVD-2024-2916
Malicious code in bioql PyPI...
EUVD-2022-2632
Malicious code in bioql PyPI...
EUVD-2022-26557
Malicious code in bioql PyPI...
EUVD-2025-6586
Malicious code in bioql PyPI...
CVE-2023-49883
IBM Transformation Extender Advanced 10.0.1 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts...
CVE-2025-59745
Vulnerability in the cryptographic algorithm of AndSoft's e-TMS v25.03, which uses MD5 to encrypt passwords. MD5 is a cryptographically vulnerable hash algorithm and is no longer considered secure for storing or transmitting passwords. It is vulnerable to collision attacks and can be easily crack...
Node address isn't always verified when proxying
...
Meet SpamGPT and MatrixPDF, AI Toolkits Driving Malware Attacks
Cybersecurity researchers at Varonis have discovered two new plug-and-play cybercrime toolkits, MatrixPDF and SpamGPT. Learn how these AI-powered tools make mass phishing and PDF malware accessible to anyone, redefining online security risks...
PT-2025-40276
Name of the Vulnerable Software and Affected Versions IBM Transformation Extender Advanced version 10.0.1 Description The software does not enforce strong passwords by default, potentially simplifying account compromise by attackers. Recommendations Ensure users are required to use strong passwor...
CVE-2025-34211
Vasion Print formerly PrinterLogic Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 VA and SaaS deployments contain a private SSL key and matching public certificate stored in cleartext. The key belongs to the hostname pl‑local.com and is used by the...
Qualys Named a Leader in the 2025 IDC MarketScape: Worldwide Exposure Management Vendor Assessment
We’re proud to announce that Qualys has been recognized as a Leader in theIDC MarketScape: Worldwide Exposure Management 2025 Vendor Assessment doc US52994525, August 2025. We believe this recognition underscores Qualys’ commitment to helping organizations proactively manage cyber risk with...
Malicious code in v-pure-tooltip (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11bde7847b3225c4c27a2008a9044848c459c69ebe532cf7fd4d0939d4f91f86 Any computer that has this package installed or running should be considered...
Dynamic Causal Attack Graph Based Cyber-Security Risk Assessment Framework for CTCS System
Protecting the security of the train control system is a critical issue to ensure the safe and reliable operation of high-speed trains. Scientific modeling and analysis for the security risk is a promising way to guarantee system security. However, the representation and assessment of the...
CVE-2025-11155
CVE-2025-11155 describes weak encoding for device password: credentials are sent in base64 inside HTTP headers, which is not encryption, allowing an interceptor to obtain them during login. The CVSS vector indicates Adjacent attack vector, Low attack complexity, no privileges, and Active user int...