CVE-2025-28355

CVE-2025-28355 Было выявлено, что приложение https://github.com/Volmarg/personal-management-system уязвимо к CSRF-атакам. Одним из множества действий, которые может выполнить злоумышленник, является обман легитимного пользователя, чтобы тот выполнил межсайтовый запрос, изменяющий его пароль, что...

CVE-2023-43838

CVE-2023-43838 Personal Management System v1.4.64의 임의 파일 업로드 취약점으로 인해 공격자가 조작된 SVG 파일을 사용자 프로필의 아바타에 업로드하여 임의 코드를 실행할 수 있습니다. 추가 정보 1. 다음 내용으로 alert.svg를 생성합니다: root@kitploit: alert"huntr.dev"; 2. .SVG 파일을 웹 서버에 호스팅합니다. 3. .SVG 파일을 아바타 이미지로 업로드합니다. 4. 사용자가 아바타를 별도의 탭에서 열면 .SVG 파일에 저장된 JavaScript가...

CVE-2023-43838

An arbitrary file upload vulnerability in Personal Management System v1.4.64 allows attackers to execute arbitrary code via uploading a crafted SVG file into a user profile's avatar...

EUVD-2025-12366

Malicious code in bioql PyPI...

EUVD-2025-11801

Malicious code in bioql PyPI...

EUVD-2025-12364

Malicious code in bioql PyPI...

EUVD-2025-12206

Malicious code in bioql PyPI...

EUVD-2023-48201

Malicious code in bioql PyPI...

EUVD-2025-12265

Malicious code in bioql PyPI...

EUVD-2024-26329

Malicious code in bioql PyPI...

EUVD-2025-11798

Malicious code in bioql PyPI...

CVE-2024-29318

Volmarg Personal Management System 1.4.64 is vulnerable to stored cross site scripting XSS via upload of a SVG file with embedded javascript code...

CVE-2024-29319

Volmarg Personal Management System 1.4.64 is vulnerable to SSRF Server Side Request Forgery via uploading a SVG file. The server can make unintended HTTP and DNS requests to a server that the attacker controls...

CVE-2025-29456

An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the create Notes function...

CVE-2025-29454

An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the Upload function...

CVE-2025-29455

An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the Travel Ideas" function...

CVE-2025-29453

An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the my-contacts-settings component...

CVE-2025-28355

Volmarg Personal Management System 1.4.65 is vulnerable to Cross Site Request Forgery CSRF allowing attackers to execute arbitrary code and obtain sensitive information via the SameSite cookie attribute defaults value set to none...

CVE-2024-53568

A stored cross-site scripting XSS vulnerability in the Image Upload section of Volmarg Personal Management System v1.4.65 allows authenticated attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the tag parameter...

CVE-2024-53569

A stored cross-site scripting XSS vulnerability in the New Goal Creation section of Volmarg Personal Management System v1.4.65 allows authenticated attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the description parameter...