EUVD-2024-31757

Malicious code in bioql PyPI...

EUVD-2024-35291

Malicious code in bioql PyPI...

EUVD-2023-57874

Malicious code in bioql PyPI...

EUVD-2022-28518

Malicious code in bioql PyPI...

EUVD-2025-21434

Malicious code in bioql PyPI...

EUVD-2024-16206

Malicious code in bioql PyPI...

EUVD-2022-52251

Malicious code in bioql PyPI...

EUVD-2023-3258

Malicious code in bioql PyPI...

EUVD-2024-20636

Malicious code in bioql PyPI...

EUVD-2024-27581

Malicious code in bioql PyPI...

EUVD-2025-1839

Malicious code in bioql PyPI...

EUVD-2022-42259

Malicious code in bioql PyPI...

EUVD-2023-40494

Malicious code in bioql PyPI...

EUVD-2025-20285

Malicious code in bioql PyPI...

EUVD-2022-2827

Malicious code in bioql PyPI...

EUVD-2021-30016

Malicious code in bioql PyPI...

EUVD-2025-16372

Malicious code in bioql PyPI...

CVE-2025-40645: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information in Viday. This vulnerability could allow an unauthenticated attacker to obtain sensitive information about customers by sending an HTTP GET request to “/api/reserva/web/clients” using the “phone” parameter...

CVE-2025-61604: Cross-Site Request Forgery (CSRF)

WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain a Cross-Site Request Forgery CSRF vulnerability. The delete operation for the Almoxarifado entity is exposed via HTTP GET without CSRF protection, allowing a third-party site to trigger...

CVE-2009-20005

CVE-2009-20005 affects InterSystems Caché 2009.1, where a stack-based buffer overflow occurs in the UtilConfigHome.csp endpoint triggered by an oversized .csp argument in an HTTP GET. Root cause: insufficient bounds checking leads to overflow of a stack buffer, enabling arbitrary code execution. ...