12 matches found
EUVD-2022-48498
Malicious code in bioql PyPI...
EUVD-2022-48501
Malicious code in bioql PyPI...
CVE-2022-45634
An issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 allows authenticated attacker to gain access to sensitive account information...
CVE-2022-45634
An issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 allows authenticated attacker to gain access to sensitive account information...
CVE-2022-45634: Exposure of Sensitive Information to an Unauthorized Actor
An issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 allows authenticated attacker to gain access to sensitive account information...
CVE-2022-45636
An issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 allows attacker to unlock models without authorization via arbitrary API requests...
CVE-2022-45637
An insecure password reset issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 service via insecure expiry mechanism...
CVE-2022-45636
An issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 allows attacker to unlock models without authorization via arbitrary API requests...
PT-2023-14724
Name of the Vulnerable Software and Affected Versions MEGAFEIS, BOFEI DBD+ Application for IOS & Android version 1.4.4 Description An issue in the MEGAFEIS, BOFEI DBD+ Application allows an attacker to gain access to sensitive account information via an insecure password policy. Recommendations F...
CVE-2022-45637: Weak Password Recovery Mechanism for Forgotten Password
An insecure password reset issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 service via insecure expiry mechanism...
CVE-2022-45636: Missing Authorization
An issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 allows attacker to unlock models without authorization via arbitrary API requests...
CVE-2022-45635: Weak Password Requirements
An issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 allows attacker to gain access to sensitive account information via insecure password policy...