EUVD-2025-3969

Malicious code in bioql PyPI...

CVE-2025-24874

CVE-2025-24874 affects SAP Commerce Backoffice. The issue is the use of the deprecated X-FRAME-OPTIONS header to prevent clickjacking; while currently effective, future browser support changes (favoring frame-ancestors CSP) could enable clickjacking, potentially exposing/modifying sensitive infor...

SAP Commerce 安全漏洞

SAP Commerce is a cloud-based e-commerce solution developed by SAP. An information disclosure vulnerability exists in SAP Commerce, which stems from the use of the deprecated X-FRAME-OPTIONS header to prevent clickjacking, and can be exploited by an attacker to disclose and tamper with sensitive...