1991 matches found
EUVD-2025-24228
Malicious code in bioql PyPI...
EUVD-2025-31583
Malicious code in bioql PyPI...
EUVD-2024-2000
Malicious code in bioql PyPI...
EUVD-2025-27552
Malicious code in bioql PyPI...
EUVD-2025-28095
Malicious code in bioql PyPI...
EUVD-2025-27549
Malicious code in bioql PyPI...
EUVD-2025-26018
Malicious code in bioql PyPI...
EUVD-2023-53350
Malicious code in bioql PyPI...
CVE-2025-59163
CVE-2025-59163 describes a DNS rebinding vulnerability in the vet MCP Server SSE Transport within the open-source vet tool (github.com/safedep/vet). The issue arises from missing validation of HTTP Host and Origin headers, enabling remote attackers to access data from the vet scan sqlite3 databas...
GHSA-6Q9C-M9FR-865M vet MCP Server SSE Transport DNS Rebinding Vulnerability
SafeDep vet is vulnerable to a DNS rebinding attack due to lack of HTTP Host and Origin header validation. To exploit this vulnerability following conditions must be met: 1. A vet scan is executed and reports are saved as sqlite3 database 2. A vet MCP server is running on default port with SSE...
PT-2025-39909
Name of the Vulnerable Software and Affected Versions vet versions prior to 1.12.5 Description The software is susceptible to a DNS rebinding attack because of missing HTTP Host and Origin header validation. When used as an MCP server in SSE mode with default ports, the sqlite3 database containin...
CVE-2025-60140
Insertion of Sensitive Information Into Sent Data vulnerability in thetechtribe The Tribal the-tech-tribe allows Retrieve Embedded Sensitive Data.This issue affects The Tribal: from n/a through = 1.3.3...
CVE-2025-59010
Insertion of Sensitive Information Into Sent Data vulnerability in Maciej Bis Permalink Manager Lite permalink-manager allows Retrieve Embedded Sensitive Data.This issue affects Permalink Manager Lite: from n/a through = 2.5.1.3...
CVE-2025-11025
Insertion of Sensitive Information Into Sent Data vulnerability in Vimesoft Information Technologies and Software Inc. Vimesoft Corporate Messaging Platform allows Retrieve Embedded Sensitive Data. This issue affects Vimesoft Corporate Messaging Platform: from V1.3.0 before V2.0.0...
CVE-2025-11025 Information Disclosure in Vimeosoft Information Technologies' Vimesoft Corporate Messaging Platform
Insertion of Sensitive Information Into Sent Data vulnerability in Vimesoft Information Technologies and Software Inc. Vimesoft Corporate Messaging Platform allows Retrieve Embedded Sensitive Data. This issue affects Vimesoft Corporate Messaging Platform: from V1.3.0 before V2.0.0...
CVE-2025-11025
The CVE-2025-11025 entry covers the Vimesoft Corporate Messaging Platform. Affected versions are V1.3.0 through V2.0.0, with a root cause described as insertion of sensitive information into sent data, enabling retrieval of embedded sensitive data. Impact per sources indicates information disclos...
PT-2025-39542
Name of the Vulnerable Software and Affected Versions Stackable versions through 3.18.1 Description A flaw exists in Benjamin Intal Stackable that allows retrieval of embedded sensitive data due to insertion of sensitive information into sent data. Recommendations Update Stackable to a version...
PT-2025-39637
Name of the Vulnerable Software and Affected Versions Vimesoft Corporate Messaging Platform versions 1.3.0 through 1.9.9 Description A flaw exists in Vimesoft Corporate Messaging Platform that allows for the retrieval of embedded sensitive data. This issue involves the insertion of sensitive...
PT-2025-39572
Name of the Vulnerable Software and Affected Versions Themelooks FoodBook versions through 4.7.1 Description An issue exists in Themelooks FoodBook that allows for the retrieval of embedded sensitive data due to insertion of sensitive information into sent data. Recommendations Update to a versio...