EUVD-2025-21904

Malicious code in bioql PyPI...

EUVD-2025-21905

Malicious code in bioql PyPI...

CVE-2025-45156

Splashin iOS v2.0 fails to enforce server-side interval restrictions for location updates for free-tier users...

CVE-2025-45157

Insecure permissions in Splashin iOS v2.0 allow unauthorized attackers to access location data for specific users...

CVE-2025-45157

Insecure permissions in Splashin iOS v2.0 allow unauthorized attackers to access location data for specific users...

CVE-2025-45156

Splashin iOS v2.0 fails to enforce server-side interval restrictions for location updates for free-tier users...

CVE-2025-45156

Splashin iOS v2.0 fails to enforce server-side interval restrictions for location updates for free-tier users...

CVE-2025-45157: Improper Access Control

Insecure permissions in Splashin iOS v2.0 allow unauthorized attackers to access location data for specific users...

CVE-2025-45156: Undefined Security Weakness

Splashin iOS v2.0 fails to enforce server-side interval restrictions for location updates for free-tier users...

PT-2025-30064

Name of the Vulnerable Software and Affected Versions Splashin iOS version 2.0 Description Insecure permissions allow unauthorized attackers to access location data for specific users. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

CVE-2025-45157

The Splashin iOS application, specifically version v2.0 , contains a security vulnerability due to improperly set permissions (CWE-284). This flaw allows unauthorized attackers to gain access to location data for specific users. At this time, there is no information regarding a newer version that...

CVE-2025-45157

Insecure permissions in Splashin iOS v2.0 allow unauthorized attackers to access location data for specific users...

PT-2025-30063

Name of the Vulnerable Software and Affected Versions Splashin iOS version 2.0 Description The Splashin iOS application version 2.0 does not enforce server-side interval restrictions for location updates for free-tier users. Recommendations Update to a newer version that contains a fix for this...

CVE-2025-45156

The Splashin iOS application version v2.0 is vulnerable to a security flaw where it fails to enforce server-side interval restrictions for location updates specifically for free-tier users . This oversight could potentially lead to location data disclosure . Remediation involves updating the appl...