EUVD-2023-40746

Malicious code in bioql PyPI...

EUVD-2024-1994

Malicious code in bioql PyPI...

EUVD-2022-38967

Malicious code in bioql PyPI...

EUVD-2025-4208

Malicious code in bioql PyPI...

EUVD-2024-50272

Malicious code in bioql PyPI...

EUVD-2025-14714

Malicious code in bioql PyPI...

EUVD-2024-2856

Malicious code in bioql PyPI...

EUVD-2025-18909

Malicious code in bioql PyPI...

EUVD-2025-12536

Malicious code in bioql PyPI...

EUVD-2024-54564

Malicious code in bioql PyPI...

EUVD-2023-53842

Malicious code in bioql PyPI...

EUVD-2025-20698

Malicious code in bioql PyPI...

EUVD-2022-48076

Malicious code in bioql PyPI...

EUVD-2024-51453

Malicious code in bioql PyPI...

EUVD-2023-32953

Malicious code in bioql PyPI...

EUVD-2023-32483

Malicious code in bioql PyPI...

EUVD-2022-48082

Malicious code in bioql PyPI...

Insufficient Session Expiration

weblate is vulnerable to Insufficient Session Expiration. The vulnerability is due to unsafe settings for the second factor in 2FA due to sessions being allowed to persist for an unusually long period, and an attacker can maintain a valid session to repeatedly attempt authentication, thereby...

Fortra GoAnywhere Managed File Transfer (MFT) < 7.8.1 Broken Access Control (fi-2025-009)

According to its self-reported version, the instance of Fortra GoAnywhere Managed File Transfer MFT running on the remote web server is prior to 7.8.1. It is, therefore, affected by a broken access Control vulnerability: - Broken access control in Fortra's GoAnywhere MFT prior to 7.8.1 allows an...

Omise: 2FA requirement bypass when inviting team members

The application's requirement for users to enable 2FA before sending team invitations was bypassed by modifying client-side responses. This allowed invitations to be sent without enabling 2FA, defeating the security requirement...