EUVD-2025-18869

Malicious code in bioql PyPI...

EUVD-2022-37165

Malicious code in bioql PyPI...

EUVD-2023-43792

Malicious code in bioql PyPI...

EUVD-2024-49071

Malicious code in bioql PyPI...

EUVD-2025-31721

Malicious code in bioql PyPI...

EUVD-2022-3210

Malicious code in bioql PyPI...

EUVD-2022-30141

Malicious code in bioql PyPI...

EUVD-2023-53322

Malicious code in bioql PyPI...

EUVD-2025-19042

Malicious code in bioql PyPI...

EUVD-2025-23938

Malicious code in bioql PyPI...

EUVD-2025-7064

Malicious code in bioql PyPI...

EUVD-2023-59175

Malicious code in bioql PyPI...

EUVD-2022-42389

Malicious code in bioql PyPI...

CVE-2025-43827

Insecure Direct Object Reference IDOR vulnerability with audit events in Liferay Portal 7.4.0 through 7.4.3.117, and older unsupported versions, and Liferay DXP 2024.Q1.1 through 2024.Q1.5, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported...

CVE-2025-41098

Insecure Direct Object Reference IDOR vulnerability in BOLD Workplanner in versions prior to 2.5.25 4935b438f9b, consisting of a misuse of the general enquiry web service...

CVE-2025-59687: Authorization Bypass Through User-Controlled Key

IMPAQTR Aurora before 1.36 allows Insecure Direct Object Reference attacks against the users list, organization details, bookmarks, and notifications of an arbitrary organization...

Kazaar security vulnerabilities

Kazaar is a print marketing fulfillment platform from Kazaar, Inc. A security vulnerability exists in Kazaar version 1.25.12 that stems from allowing modification of the order-id parameter, which could lead to an insecure direct object reference attack...

CVE-2025-43827

Insecure Direct Object Reference IDOR vulnerability with audit events in Liferay Portal 7.4.0 through 7.4.3.117, and older unsupported versions, and Liferay DXP 2024.Q1.1 through 2024.Q1.5, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported...

CVE-2025-41094

Insecure Direct Object Reference IDOR vulnerability in BOLD Workplanner in versions prior to 2.5.25 4935b438f9b, consisting of a lack of adequate validation of user input, allowing an authenticated user to access to functional contract details using unauthorised internal identifiers...

CVE-2025-41095

Insecure Direct Object Reference IDOR vulnerability in BOLD Workplanner in versions prior to 2.5.25 4935b438f9b, consisting of a lack of adequate validation of user input, allowing an authenticated user to access to planning counter details using unauthorised internal identifiers...