1890 matches found
EUVD-2023-54816
Malicious code in bioql PyPI...
EUVD-2023-3022
Malicious code in bioql PyPI...
EUVD-2022-27467
Malicious code in bioql PyPI...
EUVD-2022-5080
Malicious code in bioql PyPI...
EUVD-2025-11792
Malicious code in bioql PyPI...
EUVD-2025-32191
Malicious code in bioql PyPI...
EUVD-2024-19368
Malicious code in bioql PyPI...
EUVD-2025-22653
Malicious code in bioql PyPI...
EUVD-2025-8118
Malicious code in bioql PyPI...
EUVD-2022-3779
Malicious code in bioql PyPI...
EUVD-2022-1517
Malicious code in bioql PyPI...
EUVD-2022-7644
Malicious code in bioql PyPI...
CVE-2025-56161
YOSHOP 2.0 allows unauthenticated information disclosure via comment-list API endpoints in the Goods module. The Comment model eagerly loads the related User model without field filtering; because User.php defines no $hidden or $visible attributes, sensitive fields bcrypt password hash, mobile...
CVE-2025-56161
YOSHOP 2.0 allows unauthenticated information disclosure via comment-list API endpoints in the Goods module. The Comment model eagerly loads the related User model without field filtering; because User.php defines no $hidden or $visible attributes, sensitive fields bcrypt password hash, mobile...
CVE-2025-59745
AndSoft e-TMS v25.03 is affected. The issue arises from using MD5 to hash passwords, a cryptographically weak hash susceptible to collisions and credential disclosure. Public sources (CNVD/NVD) corroborate MD5-based password hashing as the root cause; exploitation details are not provided in the ...
CVE-2025-56161
YOSHOP 2.0 allows unauthenticated information disclosure via comment-list API endpoints in the Goods module. The Comment model eagerly loads the related User model without field filtering; because User.php defines no $hidden or $visible attributes, sensitive fields bcrypt password hash, mobile...
PT-2025-40399
Name of the Vulnerable Software and Affected Versions YOSHOP 2.0 Description The software allows unauthorized disclosure of information through comment-list API endpoints within the Goods module. The Comment model loads the related User model without filtering specific fields. Due to the absence ...
CVE-2025-56161
Summary of CVE-2025-56161 (YOSHOP 2.0): Unauthenticated information disclosure via the Goods module’s comment-list endpoints. The Comment model eagerly loads the related User model without field filtering, and since User.php defines no $hidden or $visible attributes, sensitive fields (bcrypt pass...
PT-2025-40366
Name of the Vulnerable Software and Affected Versions AndSoft e-TMS version 25.03 Description The software uses the MD5 hash algorithm to encrypt passwords. MD5 is considered a cryptographically weak hash algorithm and is susceptible to collision attacks, potentially exposing user credentials...
