EUVD-2023-1374

Malicious code in bioql PyPI...

EUVD-2023-43436

Malicious code in bioql PyPI...

EUVD-2023-43431

Malicious code in bioql PyPI...

EUVD-2022-34373

Malicious code in bioql PyPI...

EUVD-2024-48468

Malicious code in bioql PyPI...

EUVD-2025-28133

Malicious code in bioql PyPI...

EUVD-2023-24093

Malicious code in bioql PyPI...

EUVD-2022-4336

Malicious code in bioql PyPI...

EUVD-2025-27218

Malicious code in bioql PyPI...

EUVD-2023-43435

Malicious code in bioql PyPI...

EUVD-2023-43433

Malicious code in bioql PyPI...

EUVD-2023-43432

Malicious code in bioql PyPI...

EUVD-2023-43437

Malicious code in bioql PyPI...

EUVD-2024-34323

Malicious code in bioql PyPI...

CVE-2025-59406

The Flock Safety Pisco com.flocksafety.android.pisco application 6.21.11 for Android installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices has a cleartext Auth0 client secret in its codebase. Because application binaries can be trivially decompiled or inspected,...

CVE-2025-59406

The Flock Safety Pisco com.flocksafety.android.pisco application 6.21.11 for Android installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices has a cleartext Auth0 client secret in its codebase. Because application binaries can be trivially decompiled or inspected,...

CVE-2025-59406

The Flock Safety Pisco com.flocksafety.android.pisco application 6.21.11 for Android installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices has a cleartext Auth0 client secret in its codebase. Because application binaries can be trivially decompiled or inspected,...

PT-2025-40412

Name of the Vulnerable Software and Affected Versions Flock Safety Pisco application version 6.21.11 Description The Flock Safety Pisco application for Android contains a cleartext Auth0 client secret within its codebase. Attackers can recover this OAuth secret without elevated privileges by...

CVE-2025-59363

In One Identity OneLogin before 2025.3.0, a request returns the OIDC client secret with GET Apps API v2 even though this secret should only be returned when an App is first created,...

CVE-2025-59363

In One Identity OneLogin prior to 2025.3.0, the GET /api/2/apps endpoint returned OIDC client_secret values alongside app metadata, enabling disclosure of sensitive credentials. This is caused by excessive data being returned by the Apps API v2 and constitutes a breach of confidentiality for OIDC...