EUVD-2025-1635

Malicious code in bioql PyPI...

EUVD-2022-2653

Malicious code in bioql PyPI...

EUVD-2023-44080

Malicious code in bioql PyPI...

EUVD-2025-18064

Malicious code in bioql PyPI...

EUVD-2023-12309

Malicious code in bioql PyPI...

EUVD-2022-25933

Malicious code in bioql PyPI...

EUVD-2024-40289

Malicious code in bioql PyPI...

EUVD-2022-49944

Malicious code in bioql PyPI...

EUVD-2025-6845

Malicious code in bioql PyPI...

EUVD-2025-16394

Malicious code in bioql PyPI...

EUVD-2023-42473

Malicious code in bioql PyPI...

CVE-2025-11239

Potentially sensitive information in jobs on KNIME Business Hub prior to 1.16.0 were visible to all members of the user's team. Starting with KNIME Business Hub 1.16.0 only metadata of jobs is shown to team members. Only the creator of a job can see all information including in- and output data i...

CVE-2025-11239

Potentially sensitive information in jobs on KNIME Business Hub prior to 1.16.0 were visible to all members of the user's team. Starting with KNIME Business Hub 1.16.0 only metadata of jobs is shown to team members. Only the creator of a job can see all information including in- and output data i...

CVE-2025-11239 Job details are visible to all team members on KNIME Business Hub

Potentially sensitive information in jobs on KNIME Business Hub prior to 1.16.0 were visible to all members of the user's team. Starting with KNIME Business Hub 1.16.0 only metadata of jobs is shown to team members. Only the creator of a job can see all information including in- and output data i...

PT-2025-40343

Name of the Vulnerable Software and Affected Versions KNIME Business Hub versions prior to 1.16.0 Description Potentially sensitive information within jobs on KNIME Business Hub was accessible to all team members. From version 1.16.0 onwards, only job metadata is visible to team members, with ful...

Unifying Cloud Risk and Network Defense: Wiz and Check Point

Bring network context into the Security Graph to enrich cloud visibility and strengthen posture...

CVE-2025-11060 Surrealdb: surrealdb is vulnerable to unauthorized data exposure via live query subscriptions

A flaw was found in the live query subscription mechanism of the database engine. This vulnerability allows record or guest users to observe unauthorized records within the same table, bypassing access controls, via crafted LIVE SELECT subscriptions when other users alter or delete records...

PT-2025-39391

Name of the Vulnerable Software and Affected Versions iMonitor EAM version 9.6394 Description The software ships with default administrative credentials that are displayed within the management client’s connection dialog. If the administrator does not change these defaults, a remote attacker can...

BIT-JENKINS-2025-59475

Jenkins 2.527 and earlier, LTS 2.516.2 and earlier does not perform a permission check for the authenticated user profile dropdown menu, allowing attackers without Overall/Read permission to obtain limited information about the Jenkins configuration by listing available options in this menu e.g.,...

Scaling API Security Without the Complexity: Lessons from Early Adopters

APIs are a blessing and a curse. They’re the backbone of the modern internet. They also expose complex behaviors that are often poorly documented, stitched together across legacy and cloud systems, and updated faster than security teams can review. Three key groups typically shoulder the burden o...