21415 matches found
PT-2025-40621
Name of the Vulnerable Software and Affected Versions OAuth Single Sign On – SSO OAuth Client plugin for WordPress versions up to and including 6.26.12 Description The OAuth Single Sign On – SSO OAuth Client plugin for WordPress is susceptible to improper verification of cryptographic signatures...
CVE-2025-61604
WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain a Cross-Site Request Forgery CSRF vulnerability. The delete operation for the Almoxarifado entity is exposed via HTTP GET without CSRF protection, allowing a third-party site to trigger...
CVE-2025-10692 OpenSupports 4.11.0 — SQL Injection
The endpoint POST /api/staff/get-new-tickets concatenates the user-controlled parameter departmentId directly into the SQL WHERE clause without parameter binding. As a result, an authenticated staff user level ≥ 1 can inject SQL to alter the filter logic, effectively bypassing department scoping...
EUVD-2025-32372
The endpoint POST /api/staff/get-new-tickets concatenates the user-controlled parameter departmentId directly into the SQL WHERE clause without parameter binding. As a result, an authenticated staff user level ≥ 1 can inject SQL to alter the filter logic, effectively bypassing department scoping...
EUVD-2025-24959
Malicious code in bioql PyPI...
EUVD-2022-34248
Malicious code in bioql PyPI...
EUVD-2025-15038
Malicious code in bioql PyPI...
EUVD-2025-20285
Malicious code in bioql PyPI...
EUVD-2023-49896
Malicious code in bioql PyPI...
EUVD-2025-4329
Malicious code in bioql PyPI...
EUVD-2022-30427
Malicious code in bioql PyPI...
EUVD-2023-53777
Malicious code in bioql PyPI...
EUVD-2022-0725
Malicious code in bioql PyPI...
EUVD-2023-52265
Malicious code in bioql PyPI...
EUVD-2024-16137
Malicious code in bioql PyPI...
EUVD-2024-33346
Malicious code in bioql PyPI...
EUVD-2025-2118
Malicious code in bioql PyPI...
EUVD-2022-55572
Malicious code in bioql PyPI...