EUVD-2024-32021

Malicious code in bioql PyPI...

EUVD-2025-16998

Malicious code in bioql PyPI...

EUVD-2022-34619

Malicious code in bioql PyPI...

EUVD-2024-1550

Malicious code in bioql PyPI...

EUVD-2024-2978

Malicious code in bioql PyPI...

EUVD-2022-32883

Malicious code in bioql PyPI...

EUVD-2022-53530

Malicious code in bioql PyPI...

EUVD-2025-14657

Malicious code in bioql PyPI...

EUVD-2025-27239

Malicious code in bioql PyPI...

EUVD-2023-2518

Malicious code in bioql PyPI...

EUVD-2025-16988

Malicious code in bioql PyPI...

EUVD-2024-47531

Malicious code in bioql PyPI...

Incorrect User Management

Overview thorsten/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to Incorrect User Management due to allowing multiple accounts connected to the same email address. An attacker can cause account ambiguity by registering...

CVE-2025-11040

A vulnerability was detected in code-projects Hostel Management System 1.0. Affected by this issue is some unknown functionality of the file /justines/admin/modusers/index.php?view=view. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit...

Siemens User Management Component Out-of-bounds Read DoS (CVE-2025-40797)

Binary data siemensumccve-2025-40797.nbin...

CVE-2025-59797

Profession Fit 5.0.99 Build 44910 allows authorization bypass via a direct request for /api/challenges/id and also URLs for eversports, the user-management page, and the plane page...

CVE-2025-59797

Profession Fit 5.0.99 Build 44910 allows authorization bypass via a direct request for /api/challenges/id and also URLs for eversports, the user-management page, and the plane page...

PT-2025-38716

Name of the Vulnerable Software and Affected Versions Profession Fit version 5.0.99 Build 44910 Description The software allows bypassing authorization controls through direct requests to specific API endpoints and URLs. Specifically, a direct request to the /api/challenges/id endpoint allows...

CVE-2025-59797

Profession Fit 5.0.99 Build 44910 allows authorization bypass via a direct request for /api/challenges/id and also URLs for eversports, the user-management page, and the plane page...

CVE-2025-59797

Profession Fit 5.0.99 Build 44910 contains an authorization bypass vulnerability. The issue allows access via a direct request to the API endpoint /api/challenges/{id} and direct URL access to the eversports, user-management, and plane pages, indicating insufficient access control on these resour...