1620 matches found
CVE-2025-58578
The CVE-2025-58578 describes an API misuse where an authorized user can create an unlimited number of user accounts via a POST endpoint due to no quotas or validation. Public documents across Red Hat, NVD, CVE lists, and SICK-related advisories confirm the core issue (unbounded account creation) ...
CVE-2025-58578 Unlimited user creation by authorized users
A user with the appropriate authorization can create any number of user accounts via an API endpoint using a POST request. There are no quotas, checking mechanisms or restrictions to limit the creation...
EUVD-2025-32501
A user with the appropriate authorization can create any number of user accounts via an API endpoint using a POST request. There are no quotas, checking mechanisms or restrictions to limit the creation...
PT-2025-40949
Name of the Vulnerable Software and Affected Versions YoSmart YoLink versions through 2025-10-02 Description The YoSmart YoLink API constructs an endpoint URL using a device's MAC address and an MD5 hash of non-secret information, including a key starting with cf50. The API endpoint is derived fr...
EUVD-2025-24185
Malicious code in bioql PyPI...
EUVD-2025-28241
Malicious code in bioql PyPI...
EUVD-2025-24280
Malicious code in bioql PyPI...
EUVD-2025-24205
Malicious code in bioql PyPI...
EUVD-2025-25133
Malicious code in bioql PyPI...
EUVD-2024-54876
Malicious code in bioql PyPI...
EUVD-2025-29412
Malicious code in bioql PyPI...
EUVD-2025-23985
Malicious code in bioql PyPI...
EUVD-2025-32026
Malicious code in bioql PyPI...
EUVD-2025-31152
Malicious code in bioql PyPI...
EUVD-2025-24180
Malicious code in bioql PyPI...
EUVD-2025-24169
Malicious code in bioql PyPI...
EUVD-2024-54903
Malicious code in bioql PyPI...
EUVD-2025-25505
Malicious code in bioql PyPI...