EUVD-2024-27286

Malicious code in bioql PyPI...

EUVD-2024-16059

Malicious code in bioql PyPI...

EUVD-2024-16206

Malicious code in bioql PyPI...

EUVD-2025-14310

Malicious code in bioql PyPI...

EUVD-2022-31203

Malicious code in bioql PyPI...

EUVD-2025-2118

Malicious code in bioql PyPI...

EUVD-2025-21927

Malicious code in bioql PyPI...

EUVD-2024-20636

Malicious code in bioql PyPI...

EUVD-2025-20285

Malicious code in bioql PyPI...

EUVD-2025-20287

Malicious code in bioql PyPI...

EUVD-2025-15038

Malicious code in bioql PyPI...

EUVD-2023-57874

Malicious code in bioql PyPI...

EUVD-2024-21399

Malicious code in bioql PyPI...

EUVD-2025-23037

Malicious code in bioql PyPI...

EUVD-2021-30016

Malicious code in bioql PyPI...

EUVD-2024-2256

Malicious code in bioql PyPI...

EUVD-2024-31757

Malicious code in bioql PyPI...

CVE-2025-61604: Cross-Site Request Forgery (CSRF)

WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain a Cross-Site Request Forgery CSRF vulnerability. The delete operation for the Almoxarifado entity is exposed via HTTP GET without CSRF protection, allowing a third-party site to trigger...

CVE-2025-40645: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information in Viday. This vulnerability could allow an unauthenticated attacker to obtain sensitive information about customers by sending an HTTP GET request to “/api/reserva/web/clients” using the “phone” parameter...

CVE-2009-20005

CVE-2009-20005 affects InterSystems Caché 2009.1, where a stack-based buffer overflow occurs in the UtilConfigHome.csp endpoint triggered by an oversized .csp argument in an HTTP GET. Root cause: insufficient bounds checking leads to overflow of a stack buffer, enabling arbitrary code execution. ...