EUVD-2022-2093

Malicious code in bioql PyPI...

EUVD-2024-46025

Malicious code in bioql PyPI...

EUVD-2025-12528

Malicious code in bioql PyPI...

EUVD-2024-2856

Malicious code in bioql PyPI...

EUVD-2024-1994

Malicious code in bioql PyPI...

EUVD-2024-1903

Malicious code in bioql PyPI...

EUVD-2023-24302

Malicious code in bioql PyPI...

EUVD-2023-2080

Malicious code in bioql PyPI...

EUVD-2023-41181

Malicious code in bioql PyPI...

EUVD-2025-10262

Malicious code in bioql PyPI...

EUVD-2025-9018

Malicious code in bioql PyPI...

EUVD-2021-31016

Malicious code in bioql PyPI...

EUVD-2021-28279

Malicious code in bioql PyPI...

EUVD-2022-0533

Malicious code in bioql PyPI...

Insufficient Session Expiration

weblate is vulnerable to Insufficient Session Expiration. The vulnerability is due to unsafe settings for the second factor in 2FA due to sessions being allowed to persist for an unusually long period, and an attacker can maintain a valid session to repeatedly attempt authentication, thereby...

Fortra GoAnywhere Managed File Transfer (MFT) < 7.8.1 Broken Access Control (fi-2025-009)

According to its self-reported version, the instance of Fortra GoAnywhere Managed File Transfer MFT running on the remote web server is prior to 7.8.1. It is, therefore, affected by a broken access Control vulnerability: - Broken access control in Fortra's GoAnywhere MFT prior to 7.8.1 allows an...

Omise: 2FA requirement bypass when inviting team members

The application's requirement for users to enable 2FA before sending team invitations was bypassed by modifying client-side responses. This allowed invitations to be sent without enabling 2FA, defeating the security requirement...

GitHub Mandates 2FA and Short-Lived Tokens to Strengthen npm Supply Chain Security

GitHub on Monday announced that it will be changing its authentication and publishing options "in the near future" in response to a recent wave of supply chain attacks targeting the npm ecosystem, including the Shai-Hulud attack. This includes steps to address threats posed by token abuse and...

GitHub Mandates 2FA and Short-Lived Tokens to Strengthen npm Supply Chain Security

GitHub on Monday announced that it will be changing its authentication and publishing options "in the near future" in response to a recent wave of supply chain attacks targeting the npm ecosystem, including the Shai-Hulud attack. This includes steps to address threats posed by token abuse and...

CVE-2025-54391

A vulnerability in the EnableTwoFactorAuthRequest SOAP endpoint of Zimbra Collaboration ZCS allows an attacker with valid user credentials to bypass Two-Factor Authentication 2FA protection. The attacker can configure an additional 2FA method either a third-party authenticator app or email-based...