300 matches found
CVE-2025-11346
The CVE concerns ILIAS up to versions 8.23/9.13/10.1 where the Base64 Decoding Handler’s unserialize function is exploitable by manipulating the f_settings argument, enabling deserialization and a remote attack. The issue’s root cause is improper handling of f_settings in the unserialize flow. Im...
CVE-2025-11345 ILIAS Test Import unserialize deserialization
A flaw has been found in ILIAS up to 8.23/9.13/10.1. Affected by this issue is the function unserialize of the component Test Import. This manipulation causes deserialization. It is possible to initiate the attack remotely. Upgrading to version 8.24, 9.14 and 10.2 can resolve this issue. Upgradin...
PT-2025-40943
Name of the Vulnerable Software and Affected Versions ILIAS versions prior to 8.24 ILIAS versions prior to 9.14 ILIAS versions prior to 10.2 Description A flaw exists in ILIAS related to the unserialize function within the Base64 Decoding Handler component. Manipulation of the f settings argument...
EUVD-2025-32436
A vulnerability was found in LaChatterie Verger up to 1.2.10. This impacts the function redirectToAuthorization of the file /src/main/services/mcp/oauth/provider.ts. The manipulation of the argument URL results in deserialization. The attack can be executed remotely. The exploit has been made...
CVE-2025-11273
A vulnerability was found in LaChatterie Verger up to 1.2.10. This impacts the function redirectToAuthorization of the file /src/main/services/mcp/oauth/provider.ts. The manipulation of the argument URL results in deserialization. The attack can be executed remotely. The exploit has been made...
CVE-2025-11273
CVE-2025-11273 affects LaChatterie Verger up to 1.2.10. The vulnerability is in the function redirectToAuthorization of /src/main/services/mcp/oauth/provider.ts, where manipulating the URL argument enables a deserialization attack. Based on connected documents, the issue can be exploited remotely...
CVE-2025-11273 LaChatterie Verger provider.ts redirectToAuthorization deserialization
A vulnerability was found in LaChatterie Verger up to 1.2.10. This impacts the function redirectToAuthorization of the file /src/main/services/mcp/oauth/provider.ts. The manipulation of the argument URL results in deserialization. The attack can be executed remotely. The exploit has been made...
CVE-2025-11273 LaChatterie Verger provider.ts redirectToAuthorization deserialization
A vulnerability was found in LaChatterie Verger up to 1.2.10. This impacts the function redirectToAuthorization of the file /src/main/services/mcp/oauth/provider.ts. The manipulation of the argument URL results in deserialization. The attack can be executed remotely. The exploit has been made...
EUVD-2024-16965
Malicious code in bioql PyPI...
EUVD-2025-22816
Malicious code in bioql PyPI...
EUVD-2024-44297
Malicious code in bioql PyPI...
EUVD-2025-20158
Malicious code in bioql PyPI...
EUVD-2022-35104
Malicious code in bioql PyPI...
EUVD-2025-31168
Malicious code in bioql PyPI...
EUVD-2024-47605
Malicious code in bioql PyPI...
EUVD-2024-0242
Malicious code in bioql PyPI...
EUVD-2025-1693
Malicious code in bioql PyPI...
EUVD-2025-6599
Malicious code in bioql PyPI...