EUVD-2022-44450

Malicious code in bioql PyPI...

EUVD-2025-32091

Malicious code in bioql PyPI...

EUVD-2025-32092

Malicious code in bioql PyPI...

EUVD-2024-47590

Malicious code in bioql PyPI...

EUVD-2023-2873

Malicious code in bioql PyPI...

EUVD-2022-4939

Malicious code in bioql PyPI...

EUVD-2024-42809

Malicious code in bioql PyPI...

EUVD-2023-2229

Malicious code in bioql PyPI...

EUVD-2025-0185

Malicious code in bioql PyPI...

EUVD-2022-2605

Malicious code in bioql PyPI...

EUVD-2024-17482

Malicious code in bioql PyPI...

EUVD-2025-14345

Malicious code in bioql PyPI...

EUVD-2023-1650

Malicious code in bioql PyPI...

CVE-2025-40646

Exposure of sensitive information in Viday. This vulnerability could allow an attacker to obtain sensitive information about customers by intercepting HTTP requests and searching for the JWT containing sensitive user information in the JWT payload...

CVE-2025-40645

Exposure of sensitive information in Viday. This vulnerability could allow an unauthenticated attacker to obtain sensitive information about customers by sending an HTTP GET request to “/api/reserva/web/clients” using the “phone” parameter...

CVE-2025-40646 Exposure of sensitive information in Viday

Exposure of sensitive information in Viday. This vulnerability could allow an attacker to obtain sensitive information about customers by intercepting HTTP requests and searching for the JWT containing sensitive user information in the JWT payload...

CVE-2025-40645 Exposure of sensitive information in Viday

Exposure of sensitive information in Viday. This vulnerability could allow an unauthenticated attacker to obtain sensitive information about customers by sending an HTTP GET request to “/api/reserva/web/clients” using the “phone” parameter...

CVE-2025-40645 Exposure of sensitive information in Viday

Exposure of sensitive information in Viday. This vulnerability could allow an unauthenticated attacker to obtain sensitive information about customers by sending an HTTP GET request to “/api/reserva/web/clients” using the “phone” parameter...

CVE-2025-40645

CVE-2025-40645 relates to ViDay/Viday. An unauthenticated attacker can retrieve sensitive customer information by issuing an HTTP GET to /api/reserva/web/clients with the phone parameter. Technical details from sources: CVSS v4.0 base score 8.7 (HIGH) with NETWORK attack vector, LOW attack comple...

PT-2025-40330

Name of the Vulnerable Software and Affected Versions Viday affected versions not specified Description The software exhibits a flaw that could allow an attacker to obtain sensitive customer information. This is achieved by intercepting HTTP requests and locating JWTs within the request payload...