EUVD-2025-8006

Malicious code in bioql PyPI...

EUVD-2022-41234

Malicious code in bioql PyPI...

EUVD-2021-28336

Malicious code in bioql PyPI...

EUVD-2023-24315

Malicious code in bioql PyPI...

EUVD-2023-31733

Malicious code in bioql PyPI...

EUVD-2022-27632

Malicious code in bioql PyPI...

EUVD-2025-29522

Malicious code in bioql PyPI...

EUVD-2023-1100

Malicious code in bioql PyPI...

EUVD-2022-7271

Malicious code in bioql PyPI...

EUVD-2022-7256

Malicious code in bioql PyPI...

EUVD-2023-31734

Malicious code in bioql PyPI...

EUVD-2021-7767

Malicious code in bioql PyPI...

Denial Of Service (DoS)

io.undertow, undertow-core is vulnerable to Denial of Service DoS. The vulnerability is due to malformed client requests triggering server-side stream resets without abuse counters, which allows an attacker to repeatedly cause stream aborts and induce excessive server workload...

Great Scott, I’m tired

Welcome to this week's edition of the Threat Source newsletter. "Back to the Future" is 40 years old this year, and at the risk of giving away sensitive information to an audience of hackers… so am I. I don't really know what 40 is supposed to feel like. Honestly, I don't feel all that different...

PT-2025-39337

Name of the Vulnerable Software and Affected Versions Omni versions prior to 0.48.0 Description Omni, a Kubernetes management platform, has a potential issue where the Wireguard SideroLink component could be exploited to allow unauthorized packet transmission. The system establishes a peer-to-pee...

PT-2025-39220

Name of the Vulnerable Software and Affected Versions Kata Containers versions prior to 3.21.0 Description Kata Containers is an open source project focused on lightweight Virtual Machines that function like containers. In versions prior to 3.21.0, a malicious host can bypass initdata verificatio...

CVE-2025-8077 NeuVector admin account has insecure default password

A vulnerability exists in NeuVector versions up to and including 5.4.5, where a fixed string is used as the default password for the built-in admin account. If this password is not changed immediately after deployment, any workload with network access within the cluster could use the default...

security-analytics

This repository is a community-driven set of security analytics for auditing cloud usage and detecting threats to data & workloads in Google Cloud. It provides a list of sample security analytics for auditing cloud usage and detecting threats, which may assist detection engineers, threat hunters,...

Linux Distros Unpatched Vulnerability : CVE-2023-1299

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Nomad and Nomad Enterprise 1.5.0 allow a job submitter to escalate to management-level privileges using workload identity and task API. Fixed in 1.5.1...

Linux Distros Unpatched Vulnerability : CVE-2023-1296

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.5.0 did not correctly enforce deny policies applied to a workload's variables. Fixed in 1.4.6 and 1.5.1...