586 matches found
EUVD-2025-6581
Malicious code in bioql PyPI...
EUVD-2022-28588
Malicious code in bioql PyPI...
EUVD-2024-16392
Malicious code in bioql PyPI...
EUVD-2025-22759
Malicious code in bioql PyPI...
EUVD-2023-58287
Malicious code in bioql PyPI...
EUVD-2023-58617
Malicious code in bioql PyPI...
CVE-2025-8532
The CVE-2025-8532 entry concerns Bimser Solution Software Trade Inc. EBA Document and Workflow Management System, affected versions 6.7.164 up to 6.7.165 (prior to 6.7.166). The issue is described as an Authorization Bypass Through User-Controlled Key (improper authorization) that enables forcefu...
CVE-2025-8532 IDOR in Bimser's eBA Document and Workflow Management System
Authorization Bypass Through User-Controlled Key, Improper Authorization vulnerability in Bimser Solution Software Trade Inc. EBA Document and Workflow Management System allows Forceful Browsing. This issue affects eBA Document and Workflow Management System: from 6.7.164 before 6.7.166...
PT-2025-38538
Name of the Vulnerable Software and Affected Versions Bimser Solution Software Trade Inc. EBA Document and Workflow Management System versions 6.7.164 through 6.7.165 Description An improper authorization issue exists in Bimser Solution Software Trade Inc. EBA Document and Workflow Management...
Bimser eBA Document and Workflow Management System 安全漏洞
Bimser eBA Document and Workflow Management System is a document management automation platform from the US-based Bimser Inc. A security vulnerability exists in Bimser eBA Document and Workflow Management System version 6.7.164 through versions prior to 6.7.166, which stems from improper...
CVE-2025-56289
code-projects Document Management System 1.0 has a Cross Site Scripting XSS vulnerability, where attackers can leak admin's cookie information by entering malicious XSS code in the Company field when adding files...
CVE-2025-56289
code-projects Document Management System 1.0 has a Cross Site Scripting XSS vulnerability, where attackers can leak admin's cookie information by entering malicious XSS code in the Company field when adding files...
PT-2025-37995
Name of the Vulnerable Software and Affected Versions: code-projects Document Management System version 1.0 Description: The Document Management System contains a Cross Site Scripting XSS flaw. An attacker can exploit this issue to leak an administrator's cookie information by injecting malicious...
CVE-2025-56289
CVE-2025-56289 affects Code-Projects Document Management System v1.0. The vulnerability is a Cross-Site Scripting (XSS) flaw caused by failure to filter yet in the Company field during file uploads, allowing an attacker to exfiltrate the administrator’s cookies. Reported impact is limited to cook...
CVE-2025-56289
code-projects Document Management System 1.0 has a Cross Site Scripting XSS vulnerability, where attackers can leak admin's cookie information by entering malicious XSS code in the Company field when adding files...
Code-Projects Document Management System 安全漏洞
Code-Projects Document Management System is an open source document management system from Code-Projects. A security vulnerability exists in Code-Projects Document Management System version 1.0, which stems from a failure to filter malicious cross-site scripting code in the Company field when...
CVE-2025-10209 Papermerge DMS Authorization Token improper authorization
A security flaw has been discovered in Papermerge DMS up to 3.5.3. This issue affects some unknown processing of the component Authorization Token Handler. Performing manipulation results in improper authorization. The attack can be initiated remotely. The exploit has been released to the public...
Linux Distros Unpatched Vulnerability : CVE-2020-13240
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The DMS/ECM module in Dolibarr 11.0.4 allows users with the 'Setup documents directories' permission to rename uploaded files to have insecure file extensions...
CVE-2025-8853
Official Document Management System developed by 2100 Technology has an Authentication Bypass vulnerability, allowing unauthenticated remote attackers to obtain any user's connection token and use it to log into the system as that user...
CVE-2025-8853
Official Document Management System developed by 2100 Technology has an Authentication Bypass vulnerability, allowing unauthenticated remote attackers to obtain any user's connection token and use it to log into the system as that user...