EUVD-2023-38201

Malicious code in bioql PyPI...

EUVD-2025-29910

Malicious code in bioql PyPI...

EUVD-2025-28077

Malicious code in bioql PyPI...

EUVD-2025-28137

Malicious code in bioql PyPI...

EUVD-2025-3999

Malicious code in bioql PyPI...

EUVD-2025-10989

Malicious code in bioql PyPI...

EUVD-2025-23454

Malicious code in bioql PyPI...

EUVD-2023-3064

Malicious code in bioql PyPI...

EUVD-2023-29918

Malicious code in bioql PyPI...

EUVD-2023-2883

Malicious code in bioql PyPI...

EUVD-2025-24930

Malicious code in bioql PyPI...

EUVD-2023-2944

Malicious code in bioql PyPI...

EUVD-2025-5567

Malicious code in bioql PyPI...

EUVD-2025-21176

Malicious code in bioql PyPI...

EUVD-2024-52316

Malicious code in bioql PyPI...

CVE-2025-9209

The RestroPress – Online Food Ordering System plugin for WordPress is vulnerable to Authentication Bypass in versions 3.0.0 to 3.1.9.2. This is due to the plugin exposing user private tokens and API data via the /wp-json/wp/v2/users REST API endpoint. This makes it possible for unauthenticated...

CVE-2025-40646

Exposure of sensitive information in Viday. This vulnerability could allow an attacker to obtain sensitive information about customers by intercepting HTTP requests and searching for the JWT containing sensitive user information in the JWT payload...

CVE-2025-40646 Exposure of sensitive information in Viday

Exposure of sensitive information in Viday. This vulnerability could allow an attacker to obtain sensitive information about customers by intercepting HTTP requests and searching for the JWT containing sensitive user information in the JWT payload...

CVE-2025-40646 Multiple vulnerabilities in Energy CRM by Status Tracker

Stored Cross-Site Scripting XSS vulnerability in Energy CRM v2025 by Status Tracker Ltd, consisting of a stored XSS due to lack of proper validation of user input by sending a POST request to “/crm/createjobsubmit.php”, using the “JobCreatedBy” parameter. This vulnerability could allow a remote...

CVE-2025-40646

CVE-2025-40646 describes a Stored Cross-Site Scripting (XSS) in Energy CRM v2025 by Status Tracker Ltd. The vulnerability arises from insufficient validation of user input in a POST to /crm/create_job_submit.php, using the JobCreatedBy parameter. An attacker could craft a request that, when viewe...