EUVD-2023-12930

Malicious code in bioql PyPI...

EUVD-2023-46787

Malicious code in bioql PyPI...

EUVD-2022-38965

Malicious code in bioql PyPI...

EUVD-2024-50146

Malicious code in bioql PyPI...

EUVD-2022-34370

Malicious code in bioql PyPI...

EUVD-2024-3591

Malicious code in bioql PyPI...

EUVD-2025-11982

Malicious code in bioql PyPI...

EUVD-2023-44341

Malicious code in bioql PyPI...

EUVD-2022-2045

Malicious code in bioql PyPI...

EUVD-2024-16216

Malicious code in bioql PyPI...

EUVD-2023-12952

Malicious code in bioql PyPI...

EUVD-2024-48393

Malicious code in bioql PyPI...

EUVD-2022-39001

Malicious code in bioql PyPI...

EUVD-2022-15800

Malicious code in bioql PyPI...

CVE-2025-41099

Insecure Direct Object Reference IDOR vulnerability in BOLD Workplanner in versions prior to 2.5.25 4935b438f9b, consisting of a lack of adequate validation of user input, allowing an authenticated user to access to the list of permissions using unauthorised internal identifiers...

CVE-2025-41097

Insecure Direct Object Reference IDOR vulnerability in BOLD Workplanner in versions prior to 2.5.25 4935b438f9b, consisting of a lack of adequate validation of user input, allowing an authenticated user to access to basic employee details using unauthorised internal identifiers...

Liferay Portal Vulnerable to IDOR via audit events

Insecure Direct Object Reference IDOR vulnerability with audit events in Liferay Portal 7.4.0 through 7.4.3.117, and older unsupported versions, and Liferay DXP 2024.Q1.1 through 2024.Q1.5, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported...

CVE-2025-41096

Insecure Direct Object Reference IDOR vulnerability in BOLD Workplanner in versions prior to 2.5.25 4935b438f9b, consisting of a lack of adequate validation of user input, allowing an authenticated user to access to the dates of the current contract details using unauthorised internal identifiers...

CVE-2025-41092

Summary: CVE-2025-41092 affects Bold Workplanner. Vulnerability: Insecure Direct Object Reference (IDOR) due to insufficient input validation, enabling an authenticated user to access time record details via unauthorized internal identifiers. Affected versions: Bold Workplanner

CVE-2025-43810

Insecure Direct Object Reference IDOR vulnerability with commerce order notes in Liferay Portal 7.3.5 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 2023.Q4.8, 2023.Q3.1 through 2023.Q3.10, and 7.4 GA through update 92 allows remote authenticated users to from one virtual instance to add a...