240 matches found
EUVD-2024-45392
Malicious code in bioql PyPI...
EUVD-2024-26204
Malicious code in bioql PyPI...
EUVD-2022-53563
Malicious code in bioql PyPI...
EUVD-2021-9589
Malicious code in bioql PyPI...
EUVD-2024-2249
Malicious code in bioql PyPI...
EUVD-2024-39406
Malicious code in bioql PyPI...
EUVD-2022-47496
Malicious code in bioql PyPI...
CVE-2025-58276
Permission verification vulnerability in the home screen module Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-54614
Input verification vulnerability in the home screen module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-54614
Huawei HarmonyOS presents an input verification issue in the home screen module (input validation class vulnerability) that may affect availability. Affected component: HarmonyOS home screen module. Root cause: input validation vulnerability. Impact: availability may be affected if exploited. Exp...
CVE-2025-54614
Input verification vulnerability in the home screen module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-54614
Input verification vulnerability in the home screen module. Impact: Successful exploitation of this vulnerability may affect availability...
Keycloak phishing attack via email verification step in first login flow
There is a flaw with the first login flow where, during a IdP login, an attacker with a registered account can initiate the process to merge accounts with an existing victim's account. The attacker will subsequently be prompted to "review profile" information, which allows the the attacker to...
CVE-2025-53940
Quiet is an alternative to team chat apps like Slack, Discord, and Element that does not require trusting a central server or running one's own. In versions 6.1.0-alpha.4 and below, Quiet's API for backend/frontend communication was using an insecure, not constant-time comparison function for tok...
CVE-2025-53940 Quiet uses insecure, inconsistent verification on local backend token
Quiet is an alternative to team chat apps like Slack, Discord, and Element that does not require trusting a central server or running one's own. In versions 6.1.0-alpha.4 and below, Quiet's API for backend/frontend communication was using an insecure, not constant-time comparison function for tok...
Exploit for Server-Side Request Forgery in Apache Http_Server
CVE-2024-40898 This Python script checks for the presence of C...
CVE-2025-47827
In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image...
CVE-2025-48057 Icinga 2 certificate renewal might incorrectly renew an invalid certificate
Icinga 2 is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. Prior to versions 2.12.12, 2.13.12, and 2.14.6, the VerifyCertificate function can be tricked into incorrectly treating certificates as vali...