PT-2026-56305

Name of the Vulnerable Software and Affected Versions goploy version 1.17.5 Description An Insecure Direct Object Reference IDOR exists in the project and project-file handlers. The application fails to verify if a project or project-file belongs to the caller's namespace when processing requests...

MAL-2025-144447 Malicious code in lint-staged-blaze-concurrently-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c264da9ee153bfc81c5d7023d782b5e52b2e8e8b64216fe7ac06aa6fdb1d3df8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2021-23205

Malware in sbrugna...

EUVD-2023-50125

Malicious code in bioql PyPI...

CVE-2024-25222

Task Manager App v1.0 was discovered to contain a SQL injection vulnerability via the projectID parameter at /TaskManager/EditProject.php...

Task Manager SQL Injection Vulnerability

Task Manager is an open source task manager application from Code-Projects. Task Manager v1.0 has a SQL injection vulnerability , the vulnerability stems from the file /TaskManager/EditProject.php has a SQL injection vulnerability...

PT-2024-20833 · Unknown · Task Manager App

Name of the Vulnerable Software and Affected Versions: Task Manager App version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the projectID parameter at the "/TaskManager/EditProject.php" API endpoint. Recommendations: For Task...

CVE-2023-45856

qdPM 9.2 allows remote code execution by using the Add Attachments feature of Edit Project to upload a .php file to the /uploads URI...

CVE-2023-45856

qdPM 9.2 allows remote code execution by using the Add Attachments feature of Edit Project to upload a .php file to the /uploads URI...

Remote code execution

qdPM 9.2 allows remote code execution by using the Add Attachments feature of Edit Project to upload a .php file to the /uploads URI...

CVE-2023-45856

CVE-2023-45856 affects qdPM 9.2. An RCE is possible by using the Add Attachments feature in Edit Project to upload a PHP file to the /uploads URI. Impact and exploitation context are described in the sources; no remediation details are provided in the supplied documents. Processed references incl...

CVE-2023-45856

qdPM 9.2 allows remote code execution by using the Add Attachments feature of Edit Project to upload a .php file to the /uploads URI...

CVE-2023-45856: Unrestricted Upload of File with Dangerous Type

qdPM 9.2 allows remote code execution by using the Add Attachments feature of Edit Project to upload a .php file to the /uploads URI...

PT-2023-29734

Name of the Vulnerable Software and Affected Versions qdPM version 9.2 Description The issue allows remote code execution by using the Add Attachments feature of Edit Project to upload a .php file to the "/uploads" URI. Recommendations For qdPM version 9.2, consider disabling the file upload...

CVE-2021-36608

Cross Site Scripting XSS vulnerability in webTareas 2.2p1 via the Name field to /projects/editproject.php...

webTareas 跨站脚本漏洞

webTareas is a web-based open source collaboration tool. The product supports project management, bug tracking, content management and meeting management. A security vulnerability exists in webTareas version 2.2p1, which originated from a cross-site scripting vulnerability found in the Name field...

PT-2022-16481

Name of the Vulnerable Software and Affected Versions REDCap version 12.0.11 Description A Stored Cross-Site Scripting issue was discovered in the edit project settings.php file. This issue allows users with project management permissions to inject arbitrary code into the app title field when...