EUVD-1999-1174

Malware in sbrugna...

EUVD-2016-1977

Malware in sbrugna...

EUVD-2010-0540

Malware in sbrugna...

EUVD-2011-4854

Malware in sbrugna...

EUVD-2024-37591

Malicious code in bioql PyPI...

EUVD-2024-42764

Malicious code in bioql PyPI...

EUVD-2022-0364

Malicious code in bioql PyPI...

EUVD-2023-56129

Malicious code in bioql PyPI...

EUVD-2024-37592

Malicious code in bioql PyPI...

EUVD-2025-9201

Malicious code in bioql PyPI...

EUVD-2023-36092

Malicious code in bioql PyPI...

EUVD-2023-40986

Malicious code in bioql PyPI...

Ensure That the su Command Is Restricted

The su command enables a common user to have the permissions of the superuser or other users. It is often used for switching the user from a common user to the root user. The su command provides a convenient way for users to change their identities. However, if the su command is run without...

Linux Distros Unpatched Vulnerability : CVE-2021-25281

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in through SaltStack Salt before 3002.5. salt-api does not honor eauth credentials for the wheelasync client. Thus, an attacker can...

Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in cryptography-44.0.0-cp37-abi3-macosx_10_9_universal2.whl

Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of cryptography-44.0.0-cp37-abi3-macosx109universal2.whl Vulnerability Details CVEID:CVE-2024-12797 DESCRIPTION: Issue summary: Clients using RFC7250 Raw Public Keys RPKs to authenticate a server may fail to notice that the...

MAL-2025-9069 Malicious code in @malware-test-wheel-yokel-alley-altar/test-mlw3-wheel-yokel-alley-altar (npm)

The package @malware-test-wheel-yokel-alley-altar/test-mlw3-wheel-yokel-alley-altar was found to contain malicious code...

GHSA-8QF3-X8V5-2PJ8 uv allows ZIP payload obfuscation through parsing differentials

Impact In versions 0.8.5 and earlier of uv, remote ZIP archives were handled in a streamwise fashion, and file entries were not reconciled against the archive's central directory. This enabled two parser differentials against other Python package installers: 1. An attacker could contrive a ZIP...

MAL-2025-6599 Malicious code in terraform-binary-wheel (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in terraform-binary-wheel (PyPI)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-3627

The Wheel of Life: Coaching and Assessment Tool for Life Coach plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on several functions in the AjaxFunctions.php file in all versions up to, and including, 1.1.7. This makes it possible...