EUVD-2024-47137

Malicious code in bioql PyPI...

EUVD-2024-43402

Malicious code in bioql PyPI...

EUVD-2025-9428

Malicious code in bioql PyPI...

EUVD-2025-29434

Malicious code in bioql PyPI...

EUVD-2022-39893

Malicious code in bioql PyPI...

EUVD-2025-14833

Malicious code in bioql PyPI...

EUVD-2022-39891

Malicious code in bioql PyPI...

EUVD-2022-39888

Malicious code in bioql PyPI...

EUVD-2022-39889

Malicious code in bioql PyPI...

EUVD-2025-31760

Malicious code in bioql PyPI...

EUVD-2022-29036

Malicious code in bioql PyPI...

FreeBSD : Django -- multiple vulnerabilities (90fc859e-9fe4-11f0-9fa2-080027836e8b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 90fc859e-9fe4-11f0-9fa2-080027836e8b advisory. Django reports: CVE-2025-59681: Potential SQL injection in QuerySet.annotate, alias, aggregate...

CVE-2025-56675

The EKEN video doorbell T6 BT60PLUSMAINV1.0GC108420230531 periodically sends debug logs to the EKEN cloud servers with sensitive information such as the Wi-Fi SSID and password...

Securing MCP Servers with Spring AI

Model Context Protocol, or MCP for short, has taken over the AI world. If you've been following our blog, you've probably read the introduction to the topic, Connect Your AI to Everything: Spring AI's MCP Boot Starters. The security aspects of MCP have been evolving fast, and the latest version o...

CVE-2025-56675

The CVE-2025-56675 entry concerns the EKEN video doorbell T6 BT60PLUS_MAIN_V1.0_GC1084_20230531, where the device periodically sends debug logs to EKEN cloud servers that include sensitive data such as the Wi‑Fi SSID and password. Public documents from Red Hat and others corroborate the issue as ...

PT-2025-40018

Name of the Vulnerable Software and Affected Versions EKEN video doorbell T6 BT60PLUS MAIN V1.0 GC1084 20230531 Description The EKEN video doorbell T6 BT60PLUS MAIN V1.0 GC1084 20230531 firmware periodically transmits debug logs to EKEN cloud servers. These logs contain sensitive information,...

CVE-2025-56675

The EKEN video doorbell T6 BT60PLUSMAINV1.0GC108420230531 periodically sends debug logs to the EKEN cloud servers with sensitive information such as the Wi-Fi SSID and password...

CVE-2025-56675

The EKEN video doorbell T6 BT60PLUSMAINV1.0GC108420230531 periodically sends debug logs to the EKEN cloud servers with sensitive information such as the Wi-Fi SSID and password...

BIT-MONGODB-2025-3084 MongoDB Server may crash due to improper validation of explain command

When run on commands with certain arguments set, explain may fail to validate these arguments before using them. This can lead to crashes in router servers. This affects MongoDB Server v5.0 prior to 5.0.31, MongoDB Server v6.0 prior to 6.0.20, MongoDB Server v7.0 prior to 7.0.16 and MongoDB Serve...

ShadowV2 Botnet Uses Misconfigured AWS Docker for DDoS-For-Hire Service

Darktrace researchers have uncovered ShadowV2, a new botnet that operates as a DDoS-for-hire service by infecting misconfigured Docker containers on AWS cloud servers...