EUVD-2025-22507

Malicious code in bioql PyPI...

EUVD-2023-1682

Malicious code in bioql PyPI...

EUVD-2023-50375

Malicious code in bioql PyPI...

EUVD-2025-18073

Malicious code in bioql PyPI...

EUVD-2023-45101

Malicious code in bioql PyPI...

EUVD-2024-3104

Malicious code in bioql PyPI...

EUVD-2024-0628

Malicious code in bioql PyPI...

EUVD-2023-28533

Malicious code in bioql PyPI...

EUVD-2025-26966

Malicious code in bioql PyPI...

EUVD-2021-8189

Malicious code in bioql PyPI...

EUVD-2021-8246

Malicious code in bioql PyPI...

EUVD-2021-8247

Malicious code in bioql PyPI...

EUVD-2021-8147

Malicious code in bioql PyPI...

EUVD-2021-8282

Malicious code in bioql PyPI...

EUVD-2024-41372

Malicious code in bioql PyPI...

CVE-2025-41408

Improper authorization in handler for custom URL scheme issue in "Yahoo! Shopping" App for Android versions prior to 14.15.0 allows a remote unauthenticated attacker may lead a user to access an arbitrary website on the vulnerable App. As a result, the user may become a victim of a phishing attac...

"Yahoo! Shopping" App for Android fails to restrict custom URL schemes properly

Overview "Yahoo! Shopping" App for Android provided by LY Corporation contains the following vulnerability. Improper authorization in handler for custom URL scheme CWE-939 - CVE-2025-41408 Shiga Takuma of BroadBand Security, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the...

CVE-2025-41408

Summary: The vulnerability CVE-2025-41408 affects the LY/Yahoo! Shopping App for Android (pre-14.15.0). The issue is improper authorization in the handler for the app’s custom URL scheme (CWE-939), allowing a remote, unauthenticated attacker to redirect a user to an arbitrary website, enabling ph...

PT-2025-36110

Name of the Vulnerable Software and Affected Versions: Yahoo! Shopping App for Android versions prior to 14.15.0 Description: Improper authorization in the handler for a custom URL scheme in the Yahoo! Shopping App for Android may allow a remote, unauthenticated attacker to redirect a user to an...

CVE-2025-54144

The URL scheme used by Firefox to facilitate searching of text queries could incorrectly allow attackers to open arbitrary website URLs or internal pages if a user was tricked into clicking a link This vulnerability affects Firefox for iOS 141...