1361 matches found
EUVD-2023-38970
Malicious code in bioql PyPI...
EUVD-2022-33418
Malicious code in bioql PyPI...
EUVD-2025-14828
Malicious code in bioql PyPI...
EUVD-2023-37760
Malicious code in bioql PyPI...
EUVD-2021-31446
Malicious code in bioql PyPI...
EUVD-2024-53708
Malicious code in bioql PyPI...
EUVD-2021-31443
Malicious code in bioql PyPI...
EUVD-2022-30141
Malicious code in bioql PyPI...
EUVD-2022-33969
Malicious code in bioql PyPI...
EUVD-2023-38971
Malicious code in bioql PyPI...
EUVD-2022-3715
Malicious code in bioql PyPI...
EUVD-2022-52866
Malicious code in bioql PyPI...
CVE-2025-11241
The Yoast SEO Premium plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions 25.7 to 25.9 due to a flawed regex used to remove an attribute in post content, which can be abused to inject arbitrary HTML attributes, including JavaScript event handlers. This vulnerability allo...
CVE-2025-56392
An Insecure Direct Object Reference IDOR in the /dashboard/notes endpoint of Syaqui Collegetivity v1.0.0 allows attackers to impersonate other users and perform arbitrary operations via a crafted POST request...
CVE-2025-30247
An OS command injection vulnerability in user interface in Western Digital My Cloud firmware prior to 5.31.108 on NAS platforms allows remote attackers to execute arbitrary system commands via a specially crafted HTTP POST...
CVE-2025-56392
An Insecure Direct Object Reference IDOR in the /dashboard/notes endpoint of Syaqui Collegetivity v1.0.0 allows attackers to impersonate other users and perform arbitrary operations via a crafted POST request...
PT-2025-40024
Name of the Vulnerable Software and Affected Versions Syaqui Collegetivity version 1.0.0 Description An Insecure Direct Object Reference IDOR exists in the /dashboard/notes API endpoint. This allows attackers to impersonate other users and perform unauthorized actions by sending a specially craft...
CVE-2025-9648 Denial of Service in CivetWeb
A vulnerability in the CivetWeb library's function mghandleformrequest allows remote attackers to trigger a denial of service DoS condition. By sending a specially crafted HTTP POST request containing a null byte in the payload, the server enters an infinite loop during form data parsing. Multipl...
CivetWeb 安全漏洞
CivetWeb is an easy-to-use, powerful, C/C++-embeddable web server from Civetweb open source with optional CGI, SSL and Lua support. A security vulnerability exists in CivetWeb that stems from the mghandleformrequest function entering an infinite loop when parsing a specially crafted HTTP POST...