EUVD-2024-51264

Malicious code in bioql PyPI...

EUVD-2024-35339

Malicious code in bioql PyPI...

EUVD-2024-34699

Malicious code in bioql PyPI...

EUVD-2022-42830

Malicious code in bioql PyPI...

EUVD-2022-42865

Malicious code in bioql PyPI...

EUVD-2025-17103

Malicious code in bioql PyPI...

EUVD-2025-17101

Malicious code in bioql PyPI...

EUVD-2024-34698

Malicious code in bioql PyPI...

EUVD-2022-42873

Malicious code in bioql PyPI...

EUVD-2025-31031

Malicious code in bioql PyPI...

EUVD-2022-51634

Malicious code in bioql PyPI...

EUVD-2025-7255

Malicious code in bioql PyPI...

EUVD-2025-22994

Malicious code in bioql PyPI...

EUVD-2022-42842

Malicious code in bioql PyPI...

Bold Workplanner 安全漏洞

Bold Workplanner is an enterprise software for human resource management from the Spanish company Bold Workplanner. Bold Workplanner suffers from an insecure direct object reference vulnerability that can be exploited by an attacker to access the date of current contract details using an...

Bold Workplanner 安全漏洞

Bold Workplanner is an enterprise software for human resource management from the Spanish company Bold Workplanner. Bold Workplanner suffers from an insecure direct object reference vulnerability that can be exploited by an attacker to access basic employee details using an unauthorized internal...

Bold Workplanner 安全漏洞

Bold Workplanner is an enterprise software for human resource management from the Spanish company Bold Workplanner. Bold Workplanner suffers from an insecure direct object reference vulnerability that can be exploited by an attacker to access basic contract details using an unauthorized internal...

Bold Workplanner 安全漏洞

Bold Workplanner is an enterprise software for human resource management from the Spanish company Bold Workplanner. Bold Workplanner suffers from an insecure direct object reference vulnerability that can be exploited by an attacker to access functional contract details using an unauthorized...

CVE-2025-59525

Horilla HRMS prior to 1.4.0 is vulnerable to Cross-Site Scripting (XSS) via uploaded SVG files (and via allowed embed/ tags), enabling script execution when affected content (e.g., announcements) is viewed and potentially leading to an admin account takeover. The issue stems from improper sanitiz...

PT-2025-39308

Name of the Vulnerable Software and Affected Versions Horilla version 1.3.0 Description Horilla is a Human Resource Management System HRMS. Unauthenticated users can access uploaded resume files by directly guessing or predicting file URLs. These files are stored in a publicly accessible director...