193 matches found
PT-2025-48682
Name of the Vulnerable Software and Affected Versions TCMAN GIM version 20250304 Description A SQL injection issue exists in TCMAN GIM v11 version 20250304. This allows an attacker to retrieve, create, update, and delete databases. The issue is triggered by sending a GET request utilizing the...
CVE-2025-41014: Exposure of Sensitive Information to an Unauthorized Actor
User Enumeration Vulnerability in TCMAN GIM v11 version 20250304. This vulnerability allows an unauthenticated attacker to determine whether a user exists on the system. The vulnerability is exploitable through the 'pda:username' parameter with 'soapaction GetLastDatePasswordChange' in...
TCMAN GIM 信息泄露漏洞
TCMAN GIM is a management system from the Spanish company TCMAN. An information disclosure vulnerability exists in TCMAN GIM version v11 20250304, which originates from an unauthenticated attacker being able to determine if a user exists via the pda:username parameter...
CVE-2025-41013: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in TCMAN GIM v11 in version 20250304. This vulnerability allows an attacker to retrieve, create, update, and delete databases by sending a GET request using the 'idmant' parameter in '/PC/frmEPIS.aspx'...
CVE-2025-41015: Exposure of Sensitive Information to an Unauthorized Actor
User Enumeration Vulnerability in TCMAN GIM v11 version 20250304. This vulnerability allows an unauthenticated attacker to determine whether a user exists on the system. The vulnerability is exploitable through the 'pda:username' parameter with 'soapaction GetUserQuestionAndAnswer' in...
CVE-2025-41012: Missing Authorization
Unauthorized access vulnerability in TCMAN GIM v11 version 20250304. This vulnerability allows an unauthenticated attacker to determine whether a user exists on the system by using the 'pda:userId' and 'pda:newPassword' parameters with 'soapaction UnlockUser’ in '/WS/PDAWebService.asmx'...
PT-2025-48683
User Enumeration Vulnerability in TCMAN GIM v11 version 20250304. This vulnerability allows an unauthenticated attacker to determine whether a user exists on the system. The vulnerability is exploitable through the 'pda:username' parameter with 'soapaction GetLastDatePasswordChange' in...
EUVD-2022-38994
Malicious code in bioql PyPI...
EUVD-2025-27978
Malicious code in bioql PyPI...
EUVD-2025-17457
Malicious code in bioql PyPI...
EUVD-2025-13575
Malicious code in bioql PyPI...
EUVD-2025-27980
Malicious code in bioql PyPI...
EUVD-2021-28007
Malicious code in bioql PyPI...
EUVD-2025-13579
Malicious code in bioql PyPI...
EUVD-2025-13580
Malicious code in bioql PyPI...
EUVD-2022-38993
Malicious code in bioql PyPI...
EUVD-2021-33943
Malicious code in bioql PyPI...
EUVD-2025-17458
Malicious code in bioql PyPI...