EUVD-2024-16811

Malicious code in bioql PyPI...

EUVD-2025-28844

Malicious code in bioql PyPI...

EUVD-2025-2039

Malicious code in bioql PyPI...

EUVD-2025-31440

Malicious code in bioql PyPI...

EUVD-2025-30375

Malicious code in bioql PyPI...

EUVD-2025-10919

Malicious code in bioql PyPI...

EUVD-2025-21230

Malicious code in bioql PyPI...

EUVD-2024-27023

Malicious code in bioql PyPI...

EUVD-2022-51628

Malicious code in bioql PyPI...

EUVD-2024-51279

Malicious code in bioql PyPI...

EUVD-2025-28890

Malicious code in bioql PyPI...

EUVD-2025-4393

Malicious code in bioql PyPI...

EUVD-2025-23549

Malicious code in bioql PyPI...

EUVD-2025-22018

Malicious code in bioql PyPI...

CVE-2025-11078 itsourcecode Open Source Job Portal controller.php unrestricted upload

A vulnerability was identified in itsourcecode Open Source Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/user/controller.php?action=photos. The manipulation of the argument photo leads to unrestricted upload. The attack is possible to be carried out...

PT-2025-39745

Name of the Vulnerable Software and Affected Versions itsourcecode Open Source Job Portal version 1.0 Description A flaw exists in itsourcecode Open Source Job Portal 1.0 that allows for unrestricted file uploads. This is due to the manipulation of the photo argument within the file...

CVE-2025-10741

A security vulnerability has been detected in Selleo Mentingo up to 2025.08.27. The affected element is an unknown function of the component Profile Picture Handler. The manipulation of the argument userAvatar leads to unrestricted upload. The attack is possible to be carried out remotely. The...

CVE-2025-10763

A vulnerability was determined in academico-sis academico up to d9a9e2636fbf7e5845ee086bcb03ca62faceb6ab. Affected by this issue is some unknown functionality of the file /edit-photo of the component Profile Picture Handler. This manipulation causes unrestricted upload. The attack is possible to ...

PT-2025-38667

Name of the Vulnerable Software and Affected Versions CosmodiumCS OnlyRAT versions prior to 3.3 Description A vulnerability exists in CosmodiumCS OnlyRAT. The connect/remote upload/remote download function within the main.py file of the Configuration File Handler component is affected. Manipulati...

Academico 代码问题漏洞

Academico is a Lavarel-based elementary and middle school school management platform from Academico Open Source. Academico has a code issue vulnerability that stems from a missing upload restriction in the file/edit-photo function, which could lead to a remote upload attack...