EUVD-2025-7818

Malicious code in bioql PyPI...

EUVD-2023-42135

Malicious code in bioql PyPI...

EUVD-2025-20285

Malicious code in bioql PyPI...

EUVD-2021-30016

Malicious code in bioql PyPI...

EUVD-2025-21434

Malicious code in bioql PyPI...

EUVD-2022-28581

Malicious code in bioql PyPI...

EUVD-2025-4082

Malicious code in bioql PyPI...

EUVD-2024-46845

Malicious code in bioql PyPI...

EUVD-2023-54669

Malicious code in bioql PyPI...

EUVD-2024-54806

Malicious code in bioql PyPI...

EUVD-2022-28518

Malicious code in bioql PyPI...

EUVD-2023-40494

Malicious code in bioql PyPI...

EUVD-2022-52251

Malicious code in bioql PyPI...

EUVD-2024-20636

Malicious code in bioql PyPI...

EUVD-2025-32312

An issue in DirectAdmin v1.680 allows unauthorized attackers to manipulate the page layout and replace the legitimate login interface with arbitrary attacker-controlled content via supplying a crafted GET request...

WeGIA 安全漏洞

WeGIA is a web manager for welfare organizations from the individual developer Nilson Lazarin. A security vulnerability exists in WeGIA version 3.4.12 and earlier, which stems from a deletion operation of an Almoxarifado entity that is exposed via HTTP GET and lacks cross-site request forgery...

Denial Of Service (DoS)

vllm is vulnerable to Denial of Service DoS. The vulnerability is due to improper handling of excessively large HTTP headers in GET requests, which allows an attacker to exhaust server memory and cause a crash or unresponsiveness...

CVE-2025-34172

In pfSense CE /usr/local/www/haproxy/haproxystats.php, the value of the showsticktablecontent parameter is displayed after being read from HTTP GET requests. This can enable reflected cross-site scripting when the victim is authenticated...

T-INNOVA Deporsite 安全漏洞

T-INNOVA Deporsite is an application from T-INNOVA. A security vulnerability exists in T-INNOVA Deporsite that stems from a lack of authorization and could lead to obtaining information about other users via GET requests and dni parameters...

CVE-2025-54542 Sending Password in GET Request

QuickCMS sends password and login via GET Request. This allows a local attacker with access to the victim's browser history to obtain the necessary credentials to log in as the user. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or...