EUVD-2024-54658

Malicious code in bioql PyPI...

EUVD-2025-17560

Malicious code in bioql PyPI...

CVE-2024-46452

A Host Header injection vulnerability in the password reset function of VigyBag Open Source Online Shop commit 3f0e21b allows attackers to redirect victim users to a malicious site via a crafted URL...

CVE-2025-45002

Vigybag v1.0 and before is vulnerable to Cross Site Scripting XSS via the upload profile picture function under my profile...

CVE-2025-45002

Vigybag v1.0 and before is vulnerable to Cross Site Scripting XSS via the upload profile picture function under my profile...

CVE-2025-45002

Vigybag v1.0 and before is vulnerable to Cross Site Scripting XSS via the upload profile picture function under my profile...

CVE-2024-46452

A Host Header injection vulnerability in the password reset function of VigyBag Open Source Online Shop commit 3f0e21b allows attackers to redirect victim users to a malicious site via a crafted URL...

CVE-2024-46452

A Host Header injection vulnerability exists in the password reset function of the VigyBag Open Source Online Shop (specifically commit 3f0e21b ). Attackers can exploit this flaw by using a crafted URL to redirect victim users to a malicious website. While a proof-of-concept was published on June...

CVE-2024-46452

A Host Header injection vulnerability in the password reset function of VigyBag Open Source Online Shop commit 3f0e21b allows attackers to redirect victim users to a malicious site via a crafted URL...

VigyBag Open Source Online Shop 安全漏洞

VigyBag Open Source Online Shop is an open source e-commerce platform from VigyBag India. A security vulnerability exists in VigyBag Open Source Online Shop that stems from a Host Header injection in the password reset function, which could result in a redirection to a malicious site...

CVE-2025-45002

Vigybag v1.0 and before is vulnerable to Cross Site Scripting XSS via the upload profile picture function under my profile...

PT-2025-24540 · Unknown · Vigybag Open Source Online Shop

Name of the Vulnerable Software and Affected Versions: VigyBag Open Source Online Shop affected versions not specified Description: A Host Header injection issue in the password reset function allows attackers to redirect victim users to a malicious site via a crafted URL. Recommendations: At the...

Vigybag 安全漏洞

Vigybag is an e-commerce platform by Vigybag India. A security vulnerability exists in Vigybag v1.0 and earlier versions, which stems from the Upload Profile Image feature in My Profile being vulnerable to cross-site scripting attacks...

CVE-2025-45002

Vigybag v1.0 and before is vulnerable to Cross Site Scripting XSS via the upload profile picture function under my profile...

CVE-2025-45002

Vigybag v1.0 and earlier versions are vulnerable to Cross-Site Scripting (XSS) via the upload profile picture function located under the user's profile. This vulnerability allows for the potential execution of malicious scripts. As a temporary workaround, it is recommended to disable the upload p...

CVE-2024-46452

A Host Header injection vulnerability in the password reset function of VigyBag Open Source Online Shop commit 3f0e21b allows attackers to redirect victim users to a malicious site via a crafted URL...

PT-2025-24543 · Vigybag · Vigybag

Name of the Vulnerable Software and Affected Versions: Vigybag versions 1.0 and before Description: The issue is related to Cross Site Scripting XSS via the upload profile picture function under the user's profile. This allows for potential malicious script execution. No information is provided...