EUVD-2023-46156

Malicious code in bioql PyPI...

EUVD-2023-2550

Malicious code in bioql PyPI...

EUVD-2024-40794

Malicious code in bioql PyPI...

EUVD-2023-51784

Malicious code in bioql PyPI...

EUVD-2022-3919

Malicious code in bioql PyPI...

EUVD-2025-3277

Malicious code in bioql PyPI...

EUVD-2024-43484

Malicious code in bioql PyPI...

EUVD-2025-10546

Malicious code in bioql PyPI...

EUVD-2025-11758

Malicious code in bioql PyPI...

EUVD-2022-5004

Malicious code in bioql PyPI...

EUVD-2023-51944

Malicious code in bioql PyPI...

EUVD-2025-29692

Malicious code in bioql PyPI...

EUVD-2025-30840

Malicious code in bioql PyPI...

EUVD-2024-35427

Malicious code in bioql PyPI...

CVE-2025-59413

CubeCart is an ecommerce software solution. Prior to version 6.5.11, a logic flaw exists in the newsletter subscription endpoint that allows an attacker to unsubscribe any user without their consent. By changing the value of the forceunsubscribe parameter in the POST request to 1, an attacker can...

CVE-2025-59413

CubeCart is an ecommerce software solution. Prior to version 6.5.11, a logic flaw exists in the newsletter subscription endpoint that allows an attacker to unsubscribe any user without their consent. By changing the value of the forceunsubscribe parameter in the POST request to 1, an attacker can...

CVE-2025-59413 CubeCart Unauthorized Newsletter Unsubscription via force_unsubscribe Parameter

CubeCart is an ecommerce software solution. Prior to version 6.5.11, a logic flaw exists in the newsletter subscription endpoint that allows an attacker to unsubscribe any user without their consent. By changing the value of the forceunsubscribe parameter in the POST request to 1, an attacker can...

CVE-2025-59413

CVE-2025-59413 describes a logic flaw in CubeCart prior to 6.5.11 in the newsletter subscription endpoint. An attacker can set the POST parameter force_unsubscribe to 1, which allows unsubscribing any valid subscriber email address without consent. The issue affects versions before 6.5.11; it has...

CVE-2025-59413 CubeCart Unauthorized Newsletter Unsubscription via force_unsubscribe Parameter

CubeCart is an ecommerce software solution. Prior to version 6.5.11, a logic flaw exists in the newsletter subscription endpoint that allows an attacker to unsubscribe any user without their consent. By changing the value of the forceunsubscribe parameter in the POST request to 1, an attacker can...

CVE-2025-59413 CubeCart Unauthorized Newsletter Unsubscription via force_unsubscribe Parameter

CubeCart is an ecommerce software solution. Prior to version 6.5.11, a logic flaw exists in the newsletter subscription endpoint that allows an attacker to unsubscribe any user without their consent. By changing the value of the forceunsubscribe parameter in the POST request to 1, an attacker can...