EUVD-2023-32658

Malicious code in bioql PyPI...

EUVD-2022-48707

Malicious code in bioql PyPI...

EUVD-2021-30228

Malicious code in bioql PyPI...

EUVD-2023-49452

Malicious code in bioql PyPI...

EUVD-2024-17135

Malicious code in bioql PyPI...

EUVD-2023-31253

Malicious code in bioql PyPI...

EUVD-2024-27393

Malicious code in bioql PyPI...

EUVD-2024-50743

Malicious code in bioql PyPI...

EUVD-2025-7707

Malicious code in bioql PyPI...

EUVD-2024-17112

Malicious code in bioql PyPI...

EUVD-2022-4477

Malicious code in bioql PyPI...

EUVD-2025-4670

Malicious code in bioql PyPI...

EUVD-2023-42751

Malicious code in bioql PyPI...

EUVD-2024-19476

Malicious code in bioql PyPI...

EUVD-2022-28070

Malicious code in bioql PyPI...

CVE-2025-10650 Improper SSH Key Handling in Internal Debug Builds May Grant Cluster-Level Access to Non-Administrative Users

SoftIron HyperCloud 2.5.0 through 2.6.3 may incorrectly add user SSH keys to the administrator-level authorized keys under certain conditions, allowing unauthorized privilege escalation to admin via SSH. Affects non-production debug and internal development builds created between versions 2.5.0 a...

New 'Plague' PAM Backdoor Exposes Critical Linux Systems to Silent Credential Theft

Cybersecurity researchers have flagged a previously undocumented Linux backdoor dubbed Plague that has managed to evade detection for a year. "The implant is built as a malicious PAM Pluggable Authentication Module, enabling attackers to silently bypass system authentication and gain persistent S...

GO-2025-3762 New authd users logging in via SSH are members of the root group in github.com/ubuntu/authd

New authd users logging in via SSH are members of the root group in github.com/ubuntu/authd...

CVE-2025-24005

A local attacker with a local user account can leverage a vulnerable script via SSH to escalate privileges to root due to improper input validation...

PT-2025-28859 · Radiflow · Radiflow Isap Smart Collector

Name of the Vulnerable Software and Affected Versions: Radiflow iSAP Smart Collector version 1.20 Description: The issue allows a user with vpuser credentials to bypass restricted shell rbash limitations and access a full-featured Linux shell when connecting to the device via SSH. This is possibl...