EUVD-2023-37824

Malicious code in bioql PyPI...

EUVD-2024-16901

Malicious code in bioql PyPI...

EUVD-2024-27421

Malicious code in bioql PyPI...

EUVD-2022-32446

Malicious code in bioql PyPI...

EUVD-2021-8088

Malicious code in bioql PyPI...

EUVD-2023-34622

Malicious code in bioql PyPI...

EUVD-2023-31272

Malicious code in bioql PyPI...

EUVD-2022-41792

Malicious code in bioql PyPI...

EUVD-2023-49675

Malicious code in bioql PyPI...

CVE-2025-59843: Exposure of Private Personal Information to an Unauthorized Actor

Flag Forge is a Capture The Flag CTF platform. From versions 2.0.0 to before 2.3.2, the public endpoint /api/user/username returns user email addresses in its JSON response. The fix, intended for release in 2.3.1 but only available starting in version 2.3.2, removes email addresses from public AP...

Personal Identifying Information (PII) Fields Detected

This is an informational notice that the scanner was able to detect forms with fields collecting Personal Identifying Information PII data. Examples of PII data include, but are not limited to, names, email addresses, phone numbers, social security numbers, and financial information. No source da...

CVE-2025-51586: Exposure of Private Personal Information to an Unauthorized Actor

An issue was discoverd in file controllers/admin/AdminLoginController.php in PrestaShop before 8.2.1 allowing attackers to gain sensitive information via the reset password feature...

Linux Distros Unpatched Vulnerability : CVE-2019-12497

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Open Ticket Request System OTRS 7.0.x through 7.0.8, Community Edition 6.0.x through 6.0.19, and Community Edition 5.0.x through...

Azure Stack Hub Access Control Disclosure

The vulnerability of the integrated Azure Stack Hub hybrid computing system is related to deficiencies in securing access to personal information. Exploiting this vulnerability could allow attackers to disclose protected information...

CVE-2025-41685: Exposure of Private Personal Information to an Unauthorized Actor

A low-privileged remote attacker can obtain the username of another registered Sunny Portal user by entering that user's email address...

iOS iPadOS Information Disclosure

The vulnerability of iOS and iPadOS operating systems is related to deficiencies in access control for personal information. Exploiting this vulnerability can allow a malicious actor to disclose protected information from a remote location...

CVE-2025-53765

CVE-2025-53765 (Azure Stack Hub Information Disclosure Vulnerability) affects Azure Stack Hub deployments, enabling a local attacker to disclose private personal information due to improper access control. The issue concerns local access to data on Azure Stack Hub and is characterized by informat...

PT-2025-32849 · Microsoft · Azure Stack

Name of the Vulnerable Software and Affected Versions: Azure Stack affected versions not specified Description: An authorized attacker can disclose private personal information locally in Azure Stack. This allows exposure of this information to an unauthorized actor. Recommendations: At the momen...

TeaOnHer, the male version of Tea, is leaking personal information on its users too

Last week we reported about some serious leaks in Tea Dating Advice, an app that provides a space for women to exchange information about men they know, have met, or have dated in the past. The app aims to provide a platform where people can share relevant information about, say, potentially...

XWiki Platform xwiki-platform-oldcore Unauthorized Access

The vulnerability of the xwiki-platform-oldcore module of the XWiki platform, which is used for creating collaborative web applications, exposes vulnerabilities related to access control for personal information. Exploiting this vulnerability could allow an attacker to gain unauthorized access to...