EUVD-2025-12536

Malicious code in bioql PyPI...

EUVD-2024-54564

Malicious code in bioql PyPI...

EUVD-2025-14714

Malicious code in bioql PyPI...

EUVD-2025-20698

Malicious code in bioql PyPI...

EUVD-2023-40746

Malicious code in bioql PyPI...

EUVD-2023-32953

Malicious code in bioql PyPI...

EUVD-2023-32483

Malicious code in bioql PyPI...

EUVD-2022-38967

Malicious code in bioql PyPI...

EUVD-2024-1994

Malicious code in bioql PyPI...

EUVD-2023-53842

Malicious code in bioql PyPI...

EUVD-2025-4208

Malicious code in bioql PyPI...

EUVD-2022-48076

Malicious code in bioql PyPI...

EUVD-2022-48082

Malicious code in bioql PyPI...

EUVD-2022-2093

Malicious code in bioql PyPI...

Insufficient Session Expiration

weblate is vulnerable to Insufficient Session Expiration. The vulnerability is due to unsafe settings for the second factor in 2FA due to sessions being allowed to persist for an unusually long period, and an attacker can maintain a valid session to repeatedly attempt authentication, thereby...

Omise: 2FA requirement bypass when inviting team members

The application's requirement for users to enable 2FA before sending team invitations was bypassed by modifying client-side responses. This allowed invitations to be sent without enabling 2FA, defeating the security requirement...

GitHub Mandates 2FA and Short-Lived Tokens to Strengthen npm Supply Chain Security

GitHub on Monday announced that it will be changing its authentication and publishing options "in the near future" in response to a recent wave of supply chain attacks targeting the npm ecosystem, including the Shai-Hulud attack. This includes steps to address threats posed by token abuse and...

Zimbra Collaboration 安全漏洞

Zimbra Collaboration is an open source enterprise email and collaboration platform from Zimbra that supports email, calendaring, document management, and team collaboration features. A security vulnerability exists in Zimbra Collaboration that stems from the EnableTwoFactorAuthRequest SOAP endpoi...

CVE-2025-54391

CVE-2025-54391 affects Zimbra Collaboration (ZCS) via the EnableTwoFactorAuthRequest SOAP endpoint. The vulnerability allows an attacker with valid credentials to configure an additional 2FA method (third‑party authenticator app or email-based 2FA) without presenting a valid authentication token ...

PT-2025-38083

Name of the Vulnerable Software and Affected Versions: Zimbra Collaboration ZCS affected versions not specified Description: A flaw exists in the EnableTwoFactorAuthRequest SOAP endpoint of Zimbra Collaboration ZCS that allows an attacker with valid user credentials to bypass Two-Factor...