196 matches found
CVE-2026-77140
TYPO3 extension Telephone Directory (telephonedirectory) suffers from a Broken Access Control flaw. The extension validates the HMAC of a frontend employee edit link only in the action that renders the edit form, but not in the action that persists the change. As a result, an unauthenticated visi...
CVE-2026-76634 WeGIA < 3.9.2 Insecure Direct Object Reference via profile_funcionario.php
WeGIA before 3.9.2 contains an insecure direct object reference vulnerability in the employee profile page that allows authenticated attackers to access arbitrary employee records by injecting an idpessoa parameter through a request extraction function that overwrites the session-derived...
The vulnerability of the Employee Management System lies in the lack of measures taken to protect the SQL query structure, allowing attackers to execute arbitrary code and trigger service failures.
The vulnerability of software for collecting, storing, and managing files and documents in an Employee Record Management System is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and cause...
EUVD-2020-23101
Malware in sbrugna...
EUVD-2021-24262
Malware in sbrugna...
EUVD-2021-24263
Malware in sbrugna...
EUVD-2025-15402
Malicious code in bioql PyPI...
EUVD-2025-31467
Malicious code in bioql PyPI...
EUVD-2025-28715
Malicious code in bioql PyPI...
EUVD-2025-17321
Malicious code in bioql PyPI...
EUVD-2025-15401
Malicious code in bioql PyPI...
EUVD-2025-28407
Malicious code in bioql PyPI...
EUVD-2021-30384
Malicious code in bioql PyPI...
EUVD-2025-20282
Malicious code in bioql PyPI...
EUVD-2025-15400
Malicious code in bioql PyPI...
EUVD-2025-17377
Malicious code in bioql PyPI...
EUVD-2025-28406
Malicious code in bioql PyPI...
EUVD-2025-15740
Malicious code in bioql PyPI...
EUVD-2025-28725
Malicious code in bioql PyPI...
CVE-2025-11112
A security vulnerability has been detected in PHPGurukul Employee Record Management System 1.3. This impacts an unknown function of the file /myprofile.php. Such manipulation of the argument First name leads to cross site scripting. The attack can be launched remotely. The exploit has been...