EUVD-2025-8741

Malicious code in bioql PyPI...

CVE-2025-3021

Path Traversal vulnerability in e-solutions e-management. This vulnerability could allow an attacker to access confidential files outside the expected scope via the ‘file’ parameter in the /downloadReport.php endpoint...

CVE-2025-3021

Path Traversal vulnerability in e-solutions e-management. This vulnerability could allow an attacker to access confidential files outside the expected scope via the ‘file’ parameter in the /downloadReport.php endpoint...

CVE-2025-3022 OS Command Injection vulnerability in e-management of e-solutions

Os command injection vulnerability in e-solutions e-management. This vulnerability allows an attacker to execute arbitrary commands on the server via the ‘client’ parameter in the /data/apache/e-management/api/api3.php endpoint...

CVE-2025-3022 OS Command Injection vulnerability in e-management of e-solutions

Os command injection vulnerability in e-solutions e-management. This vulnerability allows an attacker to execute arbitrary commands on the server via the ‘client’ parameter in the /data/apache/e-management/api/api3.php endpoint...

CVE-2025-3021 Path Traversal vulnerability in e-management of e-solutions

Path Traversal vulnerability in e-solutions e-management. This vulnerability could allow an attacker to access confidential files outside the expected scope via the ‘file’ parameter in the /downloadReport.php endpoint...

CVE-2025-3021

CVE-2025-3021 is a path traversal vulnerability in e-solutions e-management. The issue allows an attacker to access confidential files outside the intended scope by manipulating the file parameter in the /downloadReport.php endpoint. The CVSS 4.0 base shows a high impact (8.7) with network attack...

CVE-2025-3021 Path Traversal vulnerability in e-management of e-solutions

Path Traversal vulnerability in e-solutions e-management. This vulnerability could allow an attacker to access confidential files outside the expected scope via the ‘file’ parameter in the /downloadReport.php endpoint...

CVE-2025-3021: Improper Limitation of a Pathname to a Restricted Directory

Path Traversal vulnerability in e-solutions e-management. This vulnerability could allow an attacker to access confidential files outside the expected scope via the ‘file’ parameter in the /downloadReport.php endpoint...

E-Solutions E-Management 操作系统命令注入漏洞

E-Solutions E-Management is an application from E-Solutions, Inc. An operating system command injection vulnerability exists in E-Solutions E-Management, which stems from the presence of command injection that could lead to the execution of arbitrary commands on the server...

PT-2025-13690

Name of the Vulnerable Software and Affected Versions e-solutions e-management affected versions not specified Description The issue is an OS command injection vulnerability that allows an attacker to execute arbitrary commands on the server. This is achieved via the client parameter in the...

PT-2025-13682

Name of the Vulnerable Software and Affected Versions e-solutions e-management affected versions not specified Description The issue allows an attacker to access confidential files outside the expected scope via the file parameter in the "/downloadReport.php" endpoint. This could potentially lead...

E-Solutions E-Management 路径遍历漏洞

E-Solutions E-Management is an application from E-Solutions, Inc. A path traversal vulnerability exists in E-Solutions E-Management that originates from path traversal and could result in access to confidential files outside of the expected scope...

CVE-2025-3022: Improper Neutralization of Special Elements used in an OS Command

Os command injection vulnerability in e-solutions e-management. This vulnerability allows an attacker to execute arbitrary commands on the server via the ‘client’ parameter in the /data/apache/e-management/api/api3.php endpoint...