98 matches found
EUVD-2025-8670
Malicious code in bioql PyPI...
EUVD-2022-30837
Malicious code in bioql PyPI...
EUVD-2023-59391
Malicious code in bioql PyPI...
EUVD-2025-8671
Malicious code in bioql PyPI...
CVE-2024-33832
OneNav v0.9.35-20240318 was discovered to contain a Server-Side Request Forgery SSRF via the component /index.php?c=api=getlinkinfo...
CVE-2023-7210
A vulnerability was found in OneNav up to 0.9.33. It has been classified as critical. This affects an unknown part of the file /index.php?c=api of the component API. The manipulation of the argument X-Token leads to improper authentication. It is possible to initiate the attack remotely. The...
CVE-2021-38138
OneNav beta 0.9.12 allows XSS via the Add Link feature. NOTE: the vendor's position is that there intentionally is not any XSS protection at present, because the attack risk is largely limited to a compromised account; however, XSS protection is planned for a future release...
CVE-2021-38712
OneNav 0.9.12 allows Information Disclosure of the onenav.db3 contents. NOTE: the vendor's recommended solution is to block the access via an NGINX configuration file...
CVE-2025-28097
OneNav 1.1.0 is vulnerable to Cross Site Scripting XSS in custom headers...
CVE-2025-28096
OneNav 1.1.0 is vulnerable to Server-Side Request Forgery SSRF in custom headers...
CVE-2025-28097
OneNav 1.1.0 is vulnerable to Cross Site Scripting XSS in custom headers...
CVE-2025-28096
OneNav 1.1.0 is vulnerable to Server-Side Request Forgery SSRF in custom headers...
CVE-2025-28097
OneNav 1.1.0 is vulnerable to Cross Site Scripting XSS in custom headers...
PT-2025-13592
Name of the Vulnerable Software and Affected Versions OneNav version 1.1.0 Description The issue is related to Cross Site Scripting XSS in custom headers. This means that an attacker could potentially inject malicious scripts into the headers of the OneNav application, which could then be execute...
OneNav 安全漏洞
OneNav is a bookmark management tool from OneNav, Inc. A security vulnerability exists in OneNav version 1.1.0, which originates from cross-site scripting in customized headers...
CVE-2025-28097
OneNav 1.1.0 is vulnerable to Cross Site Scripting XSS in custom headers...
CVE-2025-28097
OneNav 1.1.0 is vulnerable to Cross Site Scripting XSS in custom headers...
CVE-2025-28096: Server-Side Request Forgery (SSRF)
OneNav 1.1.0 is vulnerable to Server-Side Request Forgery SSRF in custom headers...
CVE-2025-28096
OneNav version 1.1.0 , a bookmark management tool, is vulnerable to Server-Side Request Forgery (SSRF) due to an issue in custom headers . This flaw could allow an attacker to force the server to make requests to arbitrary domains, potentially resulting in unauthorized access to sensitive data or...
