EUVD-2021-23045

Malware in sbrugna...

EUVD-2020-0406

Malware in sbrugna...

EUVD-2021-0807

Malware in sbrugna...

EUVD-2021-2354

Malware in sbrugna...

CVE-2025-9485 OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Authentication Bypass via get_resource_owner_from_id_token()

The OAuth Single Sign On – SSO OAuth Client plugin for WordPress is vulnerable to Improper Verification of Cryptographic Signature in versions up to, and including, 6.26.12. This is due to the plugin performing unsafe JWT token processing without verification or validation in the...

EUVD-2024-1221

Malicious code in bioql PyPI...

EUVD-2023-47694

Malicious code in bioql PyPI...

EUVD-2025-22549

Malicious code in bioql PyPI...

EUVD-2024-34733

Malicious code in bioql PyPI...

EUVD-2022-0611

Malicious code in bioql PyPI...

EUVD-2023-2996

Malicious code in bioql PyPI...

EUVD-2022-7650

Malicious code in bioql PyPI...

EUVD-2022-4403

Malicious code in bioql PyPI...

The vulnerability of the configuration management system and the remote execution of operations, Salt, is related to incorrect authentication. This allows attackers to bypass the authentication process.

The vulnerability of the configuration management system and remote execution of Salt operations is related to the lack of token verification in Salt master methods. Exploiting this vulnerability allows a malicious actor to bypass the authentication process...

CVE-2025-53940

Quiet is an alternative to team chat apps like Slack, Discord, and Element that does not require trusting a central server or running one's own. In versions 6.1.0-alpha.4 and below, Quiet's API for backend/frontend communication was using an insecure, not constant-time comparison function for tok...

CVE-2025-53940

Quiet is an alternative to team chat apps like Slack, Discord, and Element that does not require trusting a central server or running one's own. In versions 6.1.0-alpha.4 and below, Quiet's API for backend/frontend communication was using an insecure, not constant-time comparison function for tok...

CVE-2025-53940 Quiet uses insecure, inconsistent verification on local backend token

Quiet is an alternative to team chat apps like Slack, Discord, and Element that does not require trusting a central server or running one's own. In versions 6.1.0-alpha.4 and below, Quiet's API for backend/frontend communication was using an insecure, not constant-time comparison function for tok...

CVE-2025-53940 Quiet uses insecure, inconsistent verification on local backend token

Quiet is an alternative to team chat apps like Slack, Discord, and Element that does not require trusting a central server or running one's own. In versions 6.1.0-alpha.4 and below, Quiet's API for backend/frontend communication was using an insecure, not constant-time comparison function for tok...

CVE-2025-53940 Quiet uses insecure, inconsistent verification on local backend token

Quiet is an alternative to team chat apps like Slack, Discord, and Element that does not require trusting a central server or running one's own. In versions 6.1.0-alpha.4 and below, Quiet's API for backend/frontend communication was using an insecure, not constant-time comparison function for tok...

PT-2025-30706 · Quiet · Quiet

Name of the Vulnerable Software and Affected Versions: Quiet versions 6.1.0-alpha.4 and below Description: Quiet’s API for backend/frontend communication used an insecure, not constant-time comparison function for token verification. This allowed for a potential timing attack where an attacker...