EUVD-2025-26634

Malicious code in bioql PyPI...

EUVD-2023-42180

Malicious code in bioql PyPI...

EUVD-2023-0500

Malicious code in bioql PyPI...

EUVD-2022-0236

Malicious code in bioql PyPI...

EUVD-2023-50422

Malicious code in bioql PyPI...

EUVD-2022-7764

Malicious code in bioql PyPI...

EUVD-2023-46386

Malicious code in bioql PyPI...

EUVD-2023-54201

Malicious code in bioql PyPI...

EUVD-2022-7649

Malicious code in bioql PyPI...

EUVD-2024-38214

Malicious code in bioql PyPI...

EUVD-2025-19849

Malicious code in bioql PyPI...

EUVD-2022-0229

Malicious code in bioql PyPI...

EUVD-2022-7718

Malicious code in bioql PyPI...

EUVD-2025-22368

Malicious code in bioql PyPI...

CVE-2025-36011

IBM Jazz for Service Management 1.1.3.0 through 1.1.3.24 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to...

CVE-2025-36011

CVE-2025-36011 affects IBM Jazz for Service Management versions 1.1.3.0–1.1.3.24. The underlying issue is that authorization tokens and session cookies are stored without the Secure attribute, enabling cookie disclosure if a user is directed to or visits an insecure HTTP link. This could allow an...

Security Bulletin: IBM Jazz for Service Management is vulnerable to "cookiesEnabled" cookie not sent over SSL

Summary IBM Jazz for Service Management is vulnerable to "cookiesEnabled" cookie not sent over SSL CVE-2025-36011. Vulnerability Details CVEID:CVE-2025-36011 DESCRIPTION: IBM Jazz for Service Management does not set the secure attribute on authorization tokens or session cookies. Attackers may be...

PT-2025-36933

Name of the Vulnerable Software and Affected Versions: IBM Jazz for Service Management versions 1.1.3.0 through 1.1.3.24 Description: IBM Jazz for Service Management does not set the secure attribute on authorization tokens or session cookies. This may allow attackers to obtain cookie values by...

CVE-2025-36011: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute

IBM Jazz for Service Management 1.1.3.0 through 1.1.3.24 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to...

CVE-2025-55162

Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In versions below 1.32.10 and 1.33.0 through 1.33.6, 1.34.0 through 1.34.4 and 1.35.0, insufficient Session Expiration in the Envoy OAuth2 filter leads to failed logout operations. Whe...