EUVD-2022-1799

Malicious code in bioql PyPI...

EUVD-2022-2143

Malicious code in bioql PyPI...

EUVD-2022-0744

Malicious code in bioql PyPI...

EUVD-2022-28101

Malicious code in bioql PyPI...

EUVD-2024-32834

Malicious code in bioql PyPI...

EUVD-2022-33588

Malicious code in bioql PyPI...

EUVD-2025-21048

Malicious code in bioql PyPI...

EUVD-2024-45939

Malicious code in bioql PyPI...

EUVD-2025-24826

Malicious code in bioql PyPI...

EUVD-2022-2139

Malicious code in bioql PyPI...

EUVD-2023-0532

Malicious code in bioql PyPI...

EUVD-2023-2645

Malicious code in bioql PyPI...

EUVD-2022-29772

Malicious code in bioql PyPI...

EUVD-2025-4811

Malicious code in bioql PyPI...

CVE-2025-59934

Formbricks is an open source qualtrics alternative. Prior to version 4.0.1, Formbricks is missing JWT signature verification. This vulnerability stems from a token validation routine that only decodes JWTs jwt.decode without verifying their signatures. Both the email verification token login path...

CVE-2025-59934 Formbricks missing JWT signature verification

Formbricks is an open source qualtrics alternative. Prior to version 4.0.1, Formbricks is missing JWT signature verification. This vulnerability stems from a token validation routine that only decodes JWTs jwt.decode without verifying their signatures. Both the email verification token login path...

Microsoft Patches Critical Entra ID Flaw Enabling Global Admin Impersonation Across Tenants

A critical token validation failure in Microsoft Entra ID previously Azure Active Directory could have allowed attackers to impersonate any user, including Global Administrators, across any tenant. The vulnerability, tracked as CVE-2025-55241 , has been assigned the maximum CVSS score of 10.0. It...

CVE-2025-54807

The secret used for validating authentication tokens is hardcoded in device firmware for affected versions. An attacker who obtains the signing key can bypass authentication, gaining complete access to the system...

Zimbra Collaboration 安全漏洞

Zimbra Collaboration is an open source enterprise-class email and collaboration platform from Zimbra, Inc. that supports email, calendaring, document management, and team collaboration features. A security vulnerability exists in Zimbra Collaboration that stems from a lack of CSRF token validatio...

CVE-2025-54390

A Cross-Site Request Forgery CSRF vulnerability exists in the ResetPasswordRequest operation of Zimbra Collaboration ZCS when the zimbraFeatureResetPasswordStatus attribute is enabled. An attacker can exploit this by tricking an authenticated user into visiting a malicious webpage that silently...