EUVD-2024-27257

Malicious code in bioql PyPI...

EUVD-2024-17420

Malicious code in bioql PyPI...

EUVD-2023-54140

Malicious code in bioql PyPI...

EUVD-2022-25718

Malicious code in bioql PyPI...

EUVD-2022-15371

Malicious code in bioql PyPI...

EUVD-2024-36873

Malicious code in bioql PyPI...

EUVD-2023-58461

Malicious code in bioql PyPI...

EUVD-2025-18869

Malicious code in bioql PyPI...

EUVD-2023-25688

Malicious code in bioql PyPI...

Workhorse Software Services, Inc. software prior to version 1.9.4.48019, default deployment is vulnerable to multiple issues.

Overview Workhorse Software Services, Inc municipal accounting software prior to version 1.9.4.48019 contains design flaws that could allow unauthorized access to sensitive data and facilitate data exfiltration. Specifically, database connection information is stored in plaintext alongside the...

MAL-2025-13154 Malicious code in @zalastax/nolb-pii (npm)

The package @zalastax/nolb-pii was found to contain malicious code...

Malicious code in pii-detector (npm)

The package pii-detector was found to contain malicious code...

Malicious code in @zalastax/nolb-pii (npm)

The package @zalastax/nolb-pii was found to contain malicious code...

MAL-2025-29249 Malicious code in pii-detector (npm)

The package pii-detector was found to contain malicious code...

PT-2025-32437 · Byd · Byd Dilink 3.0 Os

Name of the Vulnerable Software and Affected Versions: BYD DiLink 3.0 OS affected versions not specified Description: An incorrect encryption implementation exists in the system log dump feature. An attacker with physical access to the vehicle can bypass the encryption of log dumps on the...

CVE-2025-52920

Innoshop through 0.4.1 allows Insecure Direct Object Reference IDOR at multiple places within the frontend shop. Anyone can create a customer account and easily exploit these. Successful exploitation results in disclosure of the PII of other customers and the deletion of their reviews of products...

CVE-2025-52920

Innoshop through 0.4.1 allows Insecure Direct Object Reference IDOR at multiple places within the frontend shop. Anyone can create a customer account and easily exploit these. Successful exploitation results in disclosure of the PII of other customers and the deletion of their reviews of products...

CVE-2025-52920

Innoshop through 0.4.1 allows Insecure Direct Object Reference IDOR at multiple places within the frontend shop. Anyone can create a customer account and easily exploit these. Successful exploitation results in disclosure of the PII of other customers and the deletion of their reviews of products...

CVE-2025-52920

Innoshop through 0.4.1 allows Insecure Direct Object Reference IDOR at multiple places within the frontend shop. Anyone can create a customer account and easily exploit these. Successful exploitation results in disclosure of the PII of other customers and the deletion of their reviews of products...

PT-2025-26591 · Innoshop · Innoshop

Name of the Vulnerable Software and Affected Versions: Innoshop versions 0.4.1 and earlier Description: The issue allows for Insecure Direct Object Reference IDOR at multiple places within the frontend shop. This can be exploited by creating a customer account, allowing an attacker to disclose th...