19 matches found
EUVD-2024-54658
Malicious code in bioql PyPI...
EUVD-2025-17560
Malicious code in bioql PyPI...
CVE-2024-46452
A Host Header injection vulnerability in the password reset function of VigyBag Open Source Online Shop commit 3f0e21b allows attackers to redirect victim users to a malicious site via a crafted URL...
CVE-2025-45002
Vigybag v1.0 and before is vulnerable to Cross Site Scripting XSS via the upload profile picture function under my profile...
CVE-2025-45002
Vigybag v1.0 and before is vulnerable to Cross Site Scripting XSS via the upload profile picture function under my profile...
CVE-2025-45002
Vigybag v1.0 and before is vulnerable to Cross Site Scripting XSS via the upload profile picture function under my profile...
CVE-2024-46452
A Host Header injection vulnerability in the password reset function of VigyBag Open Source Online Shop commit 3f0e21b allows attackers to redirect victim users to a malicious site via a crafted URL...
VigyBag Open Source Online Shop 安全漏洞
VigyBag Open Source Online Shop is an open source e-commerce platform from VigyBag India. A security vulnerability exists in VigyBag Open Source Online Shop that stems from a Host Header injection in the password reset function, which could result in a redirection to a malicious site...
CVE-2024-46452
A Host Header injection vulnerability in the password reset function of VigyBag Open Source Online Shop commit 3f0e21b allows attackers to redirect victim users to a malicious site via a crafted URL...
CVE-2024-46452
The VigyBag Open Source Online Shop (specifically commit 3f0e21b ) is susceptible to a Host Header injection vulnerability within its password reset function. An attacker can leverage a crafted URL to redirect victim users to a malicious website. While a proof-of-concept has been published, no sp...
CVE-2024-46452
A Host Header injection vulnerability in the password reset function of VigyBag Open Source Online Shop commit 3f0e21b allows attackers to redirect victim users to a malicious site via a crafted URL...
PT-2025-24540 · Unknown · Vigybag Open Source Online Shop
Name of the Vulnerable Software and Affected Versions: VigyBag Open Source Online Shop affected versions not specified Description: A Host Header injection issue in the password reset function allows attackers to redirect victim users to a malicious site via a crafted URL. Recommendations: At the...
CVE-2024-46452: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A Host Header injection vulnerability in the password reset function of VigyBag Open Source Online Shop commit 3f0e21b allows attackers to redirect victim users to a malicious site via a crafted URL...
CVE-2025-45002
Vigybag v1.0 and before is vulnerable to Cross Site Scripting XSS via the upload profile picture function under my profile...
CVE-2025-45002: Improper Neutralization of Input During Web Page Generation
Vigybag v1.0 and before is vulnerable to Cross Site Scripting XSS via the upload profile picture function under my profile...
PT-2025-24543 · Vigybag · Vigybag
Name of the Vulnerable Software and Affected Versions: Vigybag versions 1.0 and before Description: The issue is related to Cross Site Scripting XSS via the upload profile picture function under the user's profile. This allows for potential malicious script execution. No information is provided...
CVE-2025-45002
The e-commerce platform Vigybag (versions 1.0 and before ) is vulnerable to Cross-Site Scripting (XSS) . The flaw exists in the upload profile picture function located under the "my profile" section, where improper neutralization of input during web page generation allows for the execution of mal...
Vigybag 安全漏洞
Vigybag is an e-commerce platform by Vigybag India. A security vulnerability exists in Vigybag v1.0 and earlier versions, which stems from the Upload Profile Image feature in My Profile being vulnerable to cross-site scripting attacks...