EUVD-2022-4164

Malicious code in bioql PyPI...

EUVD-2025-19095

Malicious code in bioql PyPI...

EUVD-2024-21971

Malicious code in bioql PyPI...

EUVD-2025-10054

Malicious code in bioql PyPI...

EUVD-2022-3246

Malicious code in bioql PyPI...

EUVD-2022-7517

Malicious code in bioql PyPI...

EUVD-2024-27318

Malicious code in bioql PyPI...

EUVD-2023-36487

Malicious code in bioql PyPI...

EUVD-2024-26925

Malicious code in bioql PyPI...

EUVD-2022-7334

Malicious code in bioql PyPI...

EUVD-2025-9751

Malicious code in bioql PyPI...

EUVD-2022-3953

Malicious code in bioql PyPI...

EUVD-2022-3779

Malicious code in bioql PyPI...

CVE-2025-51726

CyberGhostVPNSetup.exe Windows installer is signed using the weak cryptographic hash algorithm SHA-1, which is vulnerable to collision attacks. This allows a malicious actor to craft a fake installer with a forged SHA-1 certificate that may still be accepted by Windows signature verification...

CVE-2025-51726

CyberGhostVPNSetup.exe Windows installer is signed using the weak cryptographic hash algorithm SHA-1, which is vulnerable to collision attacks. This allows a malicious actor to craft a fake installer with a forged SHA-1 certificate that may still be accepted by Windows signature verification...

CVE-2025-51726

CVE-2025-51726 concerns the CyberGhostVPNSetup.exe Windows installer. The supplied documents confirm two concrete issues: (1) signing with the weak hash algorithm SHA-1 , enabling potential forged certificates that may bypass signature checks on systems without strict SmartScreen/trust policy enf...

PT-2025-31866 · Cyberghost · Cyberghostvpnsetup.Exe

Name of the Vulnerable Software and Affected Versions: CyberGhostVPNSetup.exe versions affected versions not specified Description: CyberGhostVPNSetup.exe Windows installer is signed using the weak cryptographic hash algorithm SHA-1, which is vulnerable to collision attacks. This allows a malicio...

CVE-2025-51726

CyberGhostVPNSetup.exe Windows installer is signed using the weak cryptographic hash algorithm SHA-1, which is vulnerable to collision attacks. This allows a malicious actor to craft a fake installer with a forged SHA-1 certificate that may still be accepted by Windows signature verification...

CVE-2025-51726

CyberGhostVPNSetup.exe Windows installer is signed using the weak cryptographic hash algorithm SHA-1, which is vulnerable to collision attacks. This allows a malicious actor to craft a fake installer with a forged SHA-1 certificate that may still be accepted by Windows signature verification...

CVE-2025-40923

CVE-2025-40923 affects Plack-Middleware-Session for Perl prior to 0.35, where the default session id generator uses a SHA-1 hash seeded with rand, epoch time, and PID, making session IDs predictable. Fedora advisory notes a fix to version 0.36, using Crypt::SysRandom for secure session IDs. The v...