CVE-2025-63585

CVE-2025-63585 SQL Injection cieca basata sul tempo in /action/rtcomments/status parametro: timestamp È stata riscontrata una vulnerabilità di SQL injection cieca basata sul tempo nel parametro timestamp dell'endpoint /action/rtcomments/status. Un attaccante autenticato in grado di fornire questo...

EUVD-2024-51454

Malicious code in bioql PyPI...

EUVD-2025-0076

Malicious code in bioql PyPI...

EUVD-2024-51455

Malicious code in bioql PyPI...

EUVD-2025-9038

Malicious code in bioql PyPI...

EUVD-2024-51524

Malicious code in bioql PyPI...

EUVD-2025-19189

Malicious code in bioql PyPI...

EUVD-2023-29689

Malicious code in bioql PyPI...

EUVD-2025-9035

Malicious code in bioql PyPI...

EUVD-2024-51487

Malicious code in bioql PyPI...

CVE-2025-48921

Cross-Site Request Forgery CSRF vulnerability in Drupal Open Social allows Cross Site Request Forgery.This issue affects Open Social: from 0.0.0 before 12.3.14, from 12.4.0 before 12.4.13...

CVE-2025-48921

Cross-Site Request Forgery CSRF vulnerability in Drupal Open Social allows Cross Site Request Forgery.This issue affects Open Social: from 0.0.0 before 12.3.14, from 12.4.0 before 12.4.13...

CVE-2025-48921 Open Social - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-079

Cross-Site Request Forgery CSRF vulnerability in Drupal Open Social allows Cross Site Request Forgery.This issue affects Open Social: from 0.0.0 before 12.3.14, from 12.4.0 before 12.4.13...

CVE-2025-48921 Open Social - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-079

Cross-Site Request Forgery CSRF vulnerability in Drupal Open Social allows Cross Site Request Forgery.This issue affects Open Social: from 0.0.0 before 12.3.14, from 12.4.0 before 12.4.13...

CVE-2025-48921 Open Social - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-079

Cross-Site Request Forgery CSRF vulnerability in Drupal Open Social allows Cross Site Request Forgery.This issue affects Open Social: from 0.0.0 before 12.3.14, from 12.4.0 before 12.4.13...

CVE-2025-48921

CVE-2025-48921 concerns a Cross-Site Request Forgery (CSRF) vulnerability in the Drupal Open Social distribution. Affected versions are Open Social 0.0.0–12.3.13 and 12.4.0–12.4.12. The root cause is inadequate CSRF protection on certain routes, which could allow an attacker to trick authenticate...

PT-2025-26959 · Unknown · Open Social

Name of the Vulnerable Software and Affected Versions: Open Social versions 0.0.0 through 12.3.13 Open Social versions 12.4.0 through 12.4.12 Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user. This issue ca...

Drupal Open Social 安全漏洞

Drupal Open Social is a Drupal-based social networking platform solution from the Drupal community designed to provide a complete social networking capability for businesses, organizations or communities. A security vulnerability exists in Drupal Open Social versions prior to 12.3.14 and versions...

DRUPAL-CONTRIB-2025-079

Open Social is a Drupal distribution for online communities, which ships with a default module that allows users to enroll in events. The module doesn't sufficiently protect certain routes from Cross Site Request Forgery CSRF attacks. Users can be tricked into accepting or rejecting these...

Drupal Open Social module < 12.3.14,12.4.0-12.4.12 - Unauthenticated Cross Site Request Forgery (CSRF) vulnerability

Unauthenticated Cross Site Request Forgery CSRF vulnerability discovered by Ivo Van Geertruyen mr.baileys in WordPress Module Open Social versions 12.3.14,12.4.0-12.4.12...