EUVD-2023-30374

Malicious code in bioql PyPI...

EUVD-2025-26336

Malicious code in bioql PyPI...

EUVD-2025-9612

Malicious code in bioql PyPI...

EUVD-2025-26337

Malicious code in bioql PyPI...

EUVD-2023-37642

Malicious code in bioql PyPI...

EUVD-2025-28773

Malicious code in bioql PyPI...

EUVD-2023-27772

Malicious code in bioql PyPI...

EUVD-2025-26335

Malicious code in bioql PyPI...

EUVD-2025-25808

Malicious code in bioql PyPI...

EUVD-2025-5636

Malicious code in bioql PyPI...

EUVD-2025-8106

Malicious code in bioql PyPI...

EUVD-2023-12778

Malicious code in bioql PyPI...

EUVD-2025-28136

Malicious code in bioql PyPI...

PT-2025-40599

Name of the Vulnerable Software and Affected Versions OpenSupports version 4.11.0 Description The software exposes an endpoint that allows modification of the 'supervised users' list for any account without verifying ownership. This allows a Level 1 staff member to alter the supervision...

CVE-2025-41097 Insecure Direct Object Reference in GPS BOLD Workplanner

Insecure Direct Object Reference IDOR vulnerability in BOLD Workplanner in versions prior to 2.5.25 4935b438f9b, consisting of a lack of adequate validation of user input, allowing an authenticated user to access to basic employee details using unauthorised internal identifiers...

CVE-2025-11118

A vulnerability was identified in CodeAstro Student Grading System 1.0. This issue affects some unknown processing of the file /adminLogin.php. Such manipulation of the argument staffId leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be...

CVE-2025-11118 CodeAstro Student Grading System adminLogin.php sql injection

A vulnerability was identified in CodeAstro Student Grading System 1.0. This issue affects some unknown processing of the file /adminLogin.php. Such manipulation of the argument staffId leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be...

PT-2025-39348

Name of the Vulnerable Software and Affected Versions Flag Forge versions prior to 2.2.0 Description The /api/admin/assign-badge endpoint in Flag Forge does not have sufficient access controls. This allows any authenticated user to assign high-privilege badges, such as Staff, to themselves. This...

CVE-2025-57396

Tandoor Recipes 2.0.0-alpha-1, fixed in 2.0.0-alpha-2, is vulnerable to privilege escalation. This is due to the rework of the API, which resulted in the User Profile API Endpoint containing two boolean values indicating whether a user is staff or administrative. Consequently, any user can escala...

CVE-2025-57396

Tandoor Recipes 2.0.0-alpha-1, fixed in 2.0.0-alpha-2, is vulnerable to privilege escalation. This is due to the rework of the API, which resulted in the User Profile API Endpoint containing two boolean values indicating whether a user is staff or administrative. Consequently, any user can escala...