CVE-2026-51366

SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary code via the apivedo/chat endpoint and the utentechat parameter...

CVE-2026-51367

An issue in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to obtain sensitive information via the apivedo/chat endpoint and the utentechat parameter...

EUVD-2026-62482

An issue in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to obtain sensitive information via the apivedo/chat endpoint and the utentechat parameter...

CVE-2026-51366

Bottinelli Informatica Vedo Suite v.1.2.5 is affected by a SQL injection vulnerability in the api_vedo/chat endpoint via the utente_chat parameter. A remote, low-privilege attacker can exploit this to achieve arbitrary code execution , resulting in full compromise of confidentiality, integrity, a...

EUVD-2026-62481

SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary code via the apivedo/chat endpoint and the utentechat parameter...

CVE-2026-51367

An issue in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to obtain sensitive information via the apivedo/chat endpoint and the utentechat parameter...

CVE-2026-51366

SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary code via the apivedo/chat endpoint and the utentechat parameter...

CVE-2026-51367

Bottinelli Informatica Vedo Suite v.1.2.5 contains an Insecure Direct Object Reference (IDOR) vulnerability in the api_vedo/chat endpoint via the utente_chat parameter. A remote, unauthenticated attacker can manipulate this parameter to access sensitive information belonging to other users, resul...

EUVD-2025-23886

Malicious code in bioql PyPI...

EUVD-2025-23879

Malicious code in bioql PyPI...

EUVD-2025-23878

Malicious code in bioql PyPI...

EUVD-2025-23889

Malicious code in bioql PyPI...

EUVD-2025-23888

Malicious code in bioql PyPI...

EUVD-2025-23881

Malicious code in bioql PyPI...

EUVD-2025-23887

Malicious code in bioql PyPI...

Bottinelli Informatical Vedo Suite Access Control Error Vulnerability

Bottinelli Informatical Vedo Suite is an enterprise software suite for the textile and design industry from Bottinelli Informatica, Italy. An access control error vulnerability exists in Bottinelli Informatical Vedo Suite, which can be exploited by an attacker to obtain an elevated privilege JWT...

Bottinelli Informatical Vedo Suite File Upload Vulnerability

Bottinelli Informatical Vedo Suite is an enterprise software suite for the textile and design industry from Bottinelli Informatica, Italy. A file upload vulnerability exists in Bottinelli Informatical Vedo Suite version 2024.17, which stems from a lack of effective validation of uploaded files by...

Bottinelli Informatical Vedo Suite Cross-Site Scripting Vulnerability

Bottinelli Informatical Vedo Suite is an enterprise software suite for the textile and design industry from Bottinelli Informatica, Italy. A cross-site scripting vulnerability exists in Bottinelli Informatical Vedo Suite version 2024.17, which originates from uncleared input in /apivedo/, and can...

Bottinelli Informatical Vedo Suite Information Disclosure Vulnerability

Bottinelli Informatical Vedo Suite is an enterprise software suite for the textile and design industry from Bottinelli Informatica, Italy. An information disclosure vulnerability exists in Bottinelli Informatical Vedo Suite, which stems from plaintext credentials stored in the...

Bottinelli Informatical Vedo Suite File Inclusion Vulnerability

Bottinelli Informatical Vedo Suite is an enterprise software suite for the textile and design industry from Bottinelli Informatica, Italy. A file inclusion vulnerability exists in Bottinelli Informatical Vedo Suite, which stems from an uncleaned readfile function call that can be exploited by an...