EUVD-2025-6599

Malicious code in bioql PyPI...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the getCookieContent function in UserRemember.php which unserializes data from a cookie without proper validation. Details Serialization is a process of converting an object into a sequence of bytes...

CVE-2025-2376

A vulnerability has been found in viames Pair Framework up to 1.9.11 and classified as critical. Affected by this vulnerability is the function getCookieContent of the file /src/UserRemember.php of the component PHP Object Handler. The manipulation of the argument cookieName leads to...

PT-2025-11474

Name of the Vulnerable Software and Affected Versions viames Pair Framework versions 1.9.0 through 1.9.11 Description A critical vulnerability has been found in the viames Pair Framework, affecting the function getCookieContent of the file /src/UserRemember.php of the component PHP Object Handler...

CVE-2025-2376: Deserialization of Untrusted Data

A vulnerability has been found in viames Pair Framework up to 1.9.11 and classified as critical. Affected by this vulnerability is the function getCookieContent of the file /src/UserRemember.php of the component PHP Object Handler. The manipulation of the argument cookieName leads to...