EUVD-2023-32431

Malicious code in bioql PyPI...

EUVD-2024-20961

Malicious code in bioql PyPI...

EUVD-2023-32437

Malicious code in bioql PyPI...

EUVD-2023-32429

Malicious code in bioql PyPI...

EUVD-2024-29038

Malicious code in bioql PyPI...

EUVD-2024-20957

Malicious code in bioql PyPI...

EUVD-2024-20955

Malicious code in bioql PyPI...

EUVD-2024-20956

Malicious code in bioql PyPI...

EUVD-2023-46209

Malicious code in bioql PyPI...

EUVD-2023-32436

Malicious code in bioql PyPI...

Zscaler Client Connector < 4.2.1 Improper Preservation of Permissions (CVE-2024-23464)

The version of Zscaler Client Connector installed on the remote Windows host is prior to 4.2.1. It is, therefore, affected by a vulnerability. - In certain cases, Zscaler Internet Access ZIA can be disabled by PowerShell commands with admin rights. This affects Zscaler Client Connector on Windows...

Zscaler Client Connector < 4.2.0.190 Multiple Vulnerabilities

The version of Zscaler Client Connector installed on the remote Windows host is prior to 4.2.0.190. It is, therefore, affected by multiple vulnerabilities. - An Improper Validation of signature in Zscaler Client Connector on Windows allows an authenticated user to disable anti-tampering. This iss...

Hackers Hide RMM Installs as Fake Chrome Updates and Teams Invites

New research from Red Canary and Zscaler shows phishing lures now drop RMM tools like ITarian and Atera,…...

77 Malicious Android Apps With 19M Downloads Targeted 831 Banks Worldwide

Zscaler reports 77 Android apps on Google Play with 19 million installs spread malware, hitting 831 banks and…...

CVE-2025-54982

An improper verification of cryptographic signature in Zscaler's SAML authentication mechanism on the server-side allowed an authentication abuse...

CVE-2025-54982

An improper verification of cryptographic signature in Zscaler's SAML authentication mechanism on the server-side allowed an authentication abuse...

CVE-2025-54982 SAML 2.0 Public Key Validation Issue

An improper verification of cryptographic signature in Zscaler's SAML authentication mechanism on the server-side allowed an authentication abuse...

CVE-2025-54982

CVE-2025-54982 concerns Zscaler's SAML authentication where the server-side verification of cryptographic signatures is improper, enabling authentication abuse. Public records describe the vulnerability as a cryptographic signature validation weakness that could allow bypassing authentication con...

CVE-2025-54982 SAML 2.0 Public Key Validation Issue

An improper verification of cryptographic signature in Zscaler's SAML authentication mechanism on the server-side allowed an authentication abuse...

Zscaler Client Connector 安全漏洞

Zscaler Client Connector is a lightweight agent from Zscaler, Inc. A security vulnerability exists in the Zscaler Client Connector that stems from improper cryptographic signature validation in the SAML authentication mechanism, which could lead to authentication abuse...