423 matches found
EUVD-2021-30834
Malicious code in bioql PyPI...
EUVD-2022-43613
Malicious code in bioql PyPI...
EUVD-2022-28261
Malicious code in bioql PyPI...
EUVD-2022-28256
Malicious code in bioql PyPI...
EUVD-2024-24968
Malicious code in bioql PyPI...
EUVD-2023-37861
Malicious code in bioql PyPI...
EUVD-2021-30836
Malicious code in bioql PyPI...
EUVD-2024-36056
Malicious code in bioql PyPI...
EUVD-2022-43616
Malicious code in bioql PyPI...
EUVD-2021-30835
Malicious code in bioql PyPI...
EUVD-2023-36483
Malicious code in bioql PyPI...
EUVD-2021-30833
Malicious code in bioql PyPI...
CISA Warns: SysAid Flaws Under Active Attack Enable Remote File Access and SSRF
The U.S. Cybersecurity and Infrastructure Security Agency CISA added two security flaws impacting SysAid IT support software to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The vulnerabilities in question are listed below - CVE-2025-2775 CVSS score: 9...
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2025-54309link is external CrushFTP Unprotected Alternate Channel Vulnerability CVE-2025-6558link is external Google Chromium ANGLE and GPU Improper Input...
SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability
SysAid On-Prem contains an improper restriction of XML external entity reference vulnerability in the Checkin processing functionality, allowing for administrator account takeover and file read primitives...
SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability
SysAid On-Prem contains an improper restriction of XML external entity reference vulnerability in the Server URL processing functionality, allowing for administrator account takeover and file read primitives...
The vulnerability in the GetMdmMessage class of SysAid software allows attackers to perform XXE attacks.
The vulnerability in the GetMdmMessage class of SysAid support and control software relates to incorrect restrictions on XML links to external objects during the processing of the /mdm/checkin endpoint. Exploiting this vulnerability allows a remote attacker to perform XXE attacks...
The vulnerability of the `com.ilient.agentApi.LshwAgent#doPost` method in the SysAid hardware and software support and control automation software allows attackers to perform XXE attacks.
The vulnerability of the com.ilient.agentApi.LshwAgentdoPost method in SysAid’s automation software for supporting and controlling hardware and software systems is related to incorrect restrictions on XML links to external objects during the processing of the /lshw endpoint. Exploiting this...
The vulnerability in the GetMdmMessage class of SysAid software allows attackers to perform XXE attacks.
The vulnerability in the GetMdmMessage class of the SysAid software for supporting and controlling hardware and software systems is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability allows a malicious actor to perform XXE attacks remotely...
