2378 matches found
EUVD-2022-5080
Malicious code in bioql PyPI...
EUVD-2024-47157
Malicious code in bioql PyPI...
EUVD-2023-52322
Malicious code in bioql PyPI...
EUVD-2022-1517
Malicious code in bioql PyPI...
EUVD-2023-54816
Malicious code in bioql PyPI...
EUVD-2024-49491
Malicious code in bioql PyPI...
EUVD-2025-22653
Malicious code in bioql PyPI...
EUVD-2025-26524
Malicious code in bioql PyPI...
EUVD-2024-49815
Malicious code in bioql PyPI...
EUVD-2022-3779
Malicious code in bioql PyPI...
EUVD-2023-2455
Malicious code in bioql PyPI...
EUVD-2025-16151
Malicious code in bioql PyPI...
EUVD-2024-0079
Malicious code in bioql PyPI...
EUVD-2024-48557
Malicious code in bioql PyPI...
EUVD-2024-27318
Malicious code in bioql PyPI...
EUVD-2022-34054
Malicious code in bioql PyPI...
CVE-2025-56161
YOSHOP 2.0 allows unauthenticated information disclosure via comment-list API endpoints in the Goods module. The Comment model eagerly loads the related User model without field filtering; because User.php defines no $hidden or $visible attributes, sensitive fields bcrypt password hash, mobile...
CVE-2025-56161
YOSHOP 2.0 allows unauthenticated information disclosure via comment-list API endpoints in the Goods module. The Comment model eagerly loads the related User model without field filtering; because User.php defines no $hidden or $visible attributes, sensitive fields bcrypt password hash, mobile...
CVE-2025-59745
AndSoft e-TMS v25.03 is affected. The issue arises from using MD5 to hash passwords, a cryptographically weak hash susceptible to collisions and credential disclosure. Public sources (CNVD/NVD) corroborate MD5-based password hashing as the root cause; exploitation details are not provided in the ...
PT-2025-40399
Name of the Vulnerable Software and Affected Versions YOSHOP 2.0 Description The software allows unauthorized disclosure of information through comment-list API endpoints within the Goods module. The Comment model loads the related User model without filtering specific fields. Due to the absence ...