Exploit for CVE-2025-10352

CVE-2025-10352 - Admin Account Creation PoC 🛠️ Exploit for C...

EUVD-2022-32379

Malicious code in bioql PyPI...

EUVD-2022-32385

Malicious code in bioql PyPI...

EUVD-2025-1661

Malicious code in bioql PyPI...

EUVD-2025-6003

Malicious code in bioql PyPI...

EUVD-2022-32380

Malicious code in bioql PyPI...

EUVD-2025-11517

Malicious code in bioql PyPI...

TRUFusion Entreprise Sensitive Data Exposure

TRUFusion Entreprise is a solution to easily and securely manage the exchange of CAD files and related product design data from within your PLM system. Due to a lack of control, it is possible for an unauthenticated attacker to access an endpoint that returns all partners who have access to the...

OpenSupports 安全漏洞

OpenSupports is a simple open source ticketing platform from OpenSupports Open Source. A security vulnerability exists in OpenSupports version 4.11.0 that originates from an unauthenticated diagnostic endpoint that allows arbitrary back-end network connections, potentially leading to a server-sid...

Vasion Print Virtual Appliance Host 安全漏洞

Vasion Print Virtual Appliance Host is a print management software from Vasion USA. A security vulnerability exists in Vasion Print Virtual Appliance Host versions prior to 25.1.102, which stems from a failure to authenticate the /api-gateway/identity/search-groups endpoint, which could allow a...

ThriveX-Blog 安全漏洞

ThriveX-Blog is a blog management system by the individual developer LiuYuYang01. A security vulnerability exists in ThriveX-Blog versions 2.5.9 through 3.1.3, which originates from the unauthenticated /api/assistant/list endpoint and could lead to the disclosure of sensitive information...

CVE-2025-58366 Onyxia private helm repository credentials are leaked through unauthenticated API

Onyxia is a data science environment for kubernetes. In versions 4.6.0 through 4.8.0, Onyxia-API leaked the credentials of private helm repositories in the public unauthenticated /public/catalogs endpoint.vOnly instances using private helm repositories i.e setting username & password in the...

CVE-2025-34163

Dongsheng Logistics Software exposes an unauthenticated endpoint at /CommMng/Print/UploadMailFile that fails to enforce proper file type validation and access control. An attacker can upload arbitrary files, including executable scripts such as .ashx, via a crafted multipart/form-data POST reques...

CVE-2025-34163

Dongsheng Logistics Software is affected by CVE-2025-34163 due to an unauthenticated endpoint at /CommMng/Print/UploadMailFile that does not validate file types or enforce proper access control. A crafted multipart/form-data POST enables uploading arbitrary files, including executable scripts suc...

PT-2025-34945

Name of the Vulnerable Software and Affected Versions: Dongsheng Logistics Software affected versions not specified Description: Dongsheng Logistics Software exposes an unauthenticated endpoint at /CommMng/Print/UploadMailFile that does not enforce proper file type validation and access control. ...

CVE-2025-43988

KuWFi 5G01-X55 FL2020V0.0.12 devices expose an unauthenticated API endpoint ajaxget.cgi, allowing remote attackers to retrieve sensitive configuration data, including admin credentials...

CVE-2025-43988

KuWFi 5G01-X55 FL2020V0.0.12 devices expose an unauthenticated API endpoint ajaxget.cgi, allowing remote attackers to retrieve sensitive configuration data, including admin credentials...

PT-2025-33072 · Kuwfi · Kuwfi 5G01-X55

Name of the Vulnerable Software and Affected Versions: KuWFi 5G01-X55 version FL2020 V0.0.12 Description: KuWFi 5G01-X55 devices expose an unauthenticated API endpoint ajax get.cgi, allowing remote attackers to retrieve sensitive configuration data, including admin credentials. Recommendations:...

CVE-2025-43988

The KuWFi 5G01-X55 WiFi router (firmware version FL2020_V0.0.12 ) is vulnerable to an unauthenticated API endpoint exposure at ajax_get.cgi . This flaw allows remote attackers to retrieve sensitive configuration data , which may include admin credentials . To mitigate this risk, it is recommended...

CVE-2025-43988

KuWFi 5G01-X55 FL2020V0.0.12 devices expose an unauthenticated API endpoint ajaxget.cgi, allowing remote attackers to retrieve sensitive configuration data, including admin credentials...