EUVD-2023-25532

Malicious code in bioql PyPI...

EUVD-2023-37454

Malicious code in bioql PyPI...

EUVD-2025-29836

Malicious code in bioql PyPI...

EUVD-2023-57642

Malicious code in bioql PyPI...

EUVD-2023-46320

Malicious code in bioql PyPI...

EUVD-2021-32520

Malicious code in bioql PyPI...

CVE-2025-40645

Exposure of sensitive information in Viday. This vulnerability could allow an unauthenticated attacker to obtain sensitive information about customers by sending an HTTP GET request to “/api/reserva/web/clients” using the “phone” parameter...

CVE-2025-40645 Exposure of sensitive information in Viday

Exposure of sensitive information in Viday. This vulnerability could allow an unauthenticated attacker to obtain sensitive information about customers by sending an HTTP GET request to “/api/reserva/web/clients” using the “phone” parameter...

CVE-2025-40645

CVE-2025-40645 relates to ViDay/Viday. An unauthenticated attacker can retrieve sensitive customer information by issuing an HTTP GET to /api/reserva/web/clients with the phone parameter. Technical details from sources: CVSS v4.0 base score 8.7 (HIGH) with NETWORK attack vector, LOW attack comple...

BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability

...

PT-2025-40329

Name of the Vulnerable Software and Affected Versions Viday affected versions not specified Description An unauthenticated attacker can obtain sensitive customer information by sending an HTTP GET request to the /api/reserva/web/clients API endpoint. The vulnerability involves the exposure of...

Personal Identifying Information (PII) Fields Detected

This is an informational notice that the scanner was able to detect forms with fields collecting Personal Identifying Information PII data. Examples of PII data include, but are not limited to, names, email addresses, phone numbers, social security numbers, and financial information. No source da...

Beware of Zelle transfer scams

As we have said many times before, falling for a scam can happen to the best of us. And it can ruin lives. In our podcast How a scam hunter got scammed, scam hunter Julie-Anne Kearns talked about how she had been duped by people pretending to be from HMRC, which is the UK’s version of the US...

CVE-2025-5955

The Service Finder SMS System plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.0.0. This is due to the plugin not verifying a user's phone number before logging them in. This makes it possible for unauthenticated attackers to login as arbitrary...

CVE-2025-59715

SMSEagle before 6.11 allows reflected XSS via a username or contact phone number...

CVE-2025-10625

A vulnerability was detected in SourceCodester Online Exam Form Submission 1.0. Affected by this vulnerability is an unknown functionality of the file /user/dashboard.php?page=updateprofile. The manipulation of the argument phone results in sql injection. The attack may be launched remotely. The...

CVE-2025-59715

SMSEagle before 6.11 allows reflected XSS via a username or contact phone number...

CVE-2025-59715

SMSEagle before 6.11 allows reflected XSS via a username or contact phone number...

CVE-2025-59715

SMSEagle before 6.11 allows reflected XSS via a username or contact phone number...

CVE-2025-59715

SMSEagle prior to 6.11 is affected by a reflected XSS vulnerability that can be triggered via a username or a contact phone number. Affected software: SMSEagle before 6.11. Underlying cause: reflected XSS in input handling. Impact: potential client-side script execution. Exploitation details are ...