EUVD-2021-19388

Malware in sbrugna...

EUVD-2019-0420

Malware in sbrugna...

EUVD-2018-5812

Malware in sbrugna...

EUVD-2019-2058

Malware in sbrugna...

EUVD-2019-3275

Malware in sbrugna...

EUVD-2014-2282

Malware in sbrugna...

EUVD-2022-29100

Malicious code in bioql PyPI...

EUVD-2024-0200

Malicious code in bioql PyPI...

EUVD-2024-25314

Malicious code in bioql PyPI...

EUVD-2023-29358

Malicious code in bioql PyPI...

EUVD-2021-30020

Malicious code in bioql PyPI...

EUVD-2022-29052

Malicious code in bioql PyPI...

EUVD-2022-52127

Malicious code in bioql PyPI...

EUVD-2025-14295

Malicious code in bioql PyPI...

CVE-2025-27388

Loading arbitrary external URLs through WebView components introduces malicious JS code that can steal arbitrary user tokens...

CVE-2025-8853

Official Document Management System developed by 2100 Technology has an Authentication Bypass vulnerability, allowing unauthenticated remote attackers to obtain any user's connection token and use it to log into the system as that user...

CVE-2025-8853 2100 Technology｜Official Document Management System - Authentication Bypass

Official Document Management System developed by 2100 Technology has an Authentication Bypass vulnerability, allowing unauthenticated remote attackers to obtain any user's connection token and use it to log into the system as that user...

CVE-2025-8853

CVE-2025-8853 concerns the Official Document Management System by 2100 Technology, which has an authentication bypass vulnerability. An unauthenticated remote attacker can obtain a user’s connection token and use it to log in as that user, enabling full access. CVSS metrics indicate CRITICAL impa...

CVE-2025-54064 rucio-server, rucio-ui, and rucio-webui vulnerable to insertion of X-Rucio-Auth-Token in apache access logfiles

Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies. The common Rucio helm-charts for the rucio-server, rucio-ui, and rucio-webui define the log format for the apache access log of these components...

CVE-2025-49198

The Media Server’s authorization tokens have a poor quality of randomness. An attacker may be able to guess the token of an active user by computing plausible tokens...