2403 matches found
CVE-2024-28157
creationtimestamp| type| source ---|---|--- 2025-10-05 21:00:12+00:00| published-proof-of-concept| Telegram/PhhScPJ8nIwc2vRijZXtfdgvBVI811MtSflqcGx0gK4a11w 2025-10-08 21:02:25+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m2pk24w6ff23 2026-09-19 00:00:08+00:00|...
EUVD-2025-25273
Malicious code in bioql PyPI...
EUVD-2025-27997
Malicious code in bioql PyPI...
EUVD-2025-32021
Malicious code in bioql PyPI...
EUVD-2025-24161
Malicious code in bioql PyPI...
EUVD-2025-28214
Malicious code in bioql PyPI...
EUVD-2025-25324
Malicious code in bioql PyPI...
EUVD-2025-32144
Malicious code in bioql PyPI...
EUVD-2025-24886
Malicious code in bioql PyPI...
Eidos 安全漏洞
Eidos is an extensible framework for personal data management by Mayne Personal Developers. A security vulnerability exists in Eidos 0.21.0 and prior versions, which stems from a specially crafted eidos URL that triggers a custom URL handler, which could lead to remote code execution...
CVE-2025-61668 @plone/volto vulnerable to potential DoS by invoking specific URL by anonymous user
Volto is a ReactJS-based frontend for the Plone Content Management System. Versions 16.34.0 and below, 17.0.0 through 17.22.1, 18.0.0 through 18.27.1, and 19.0.0-alpha.1 through 19.0.0-alpha.5, an anonymous user could cause the NodeJS server part of Volto to quit with an error when visiting a...
CVE-2025-54088
CVE-2025-54088 is an open-redirect vulnerability in Secure Access prior to version 14.10. Attackers with access to the console can redirect victims to an arbitrary URL. The attack complexity is low, attack requirements are present, no privileges are required, and users must actively participate i...
CVE-2025-54088
Open redirect vulnerability CVE-2025-54088 affects Secure Access prior to version 14.10. An attacker with console access can redirect victims to an arbitrary URL. Exploitation is low complexity and requires user participation, with low confidentiality impact locally and higher potential impact on...
CVE-2025-54088 Open Redirect in Secure Access prior to 14.10
CVE-2025-54088 is an open-redirect vulnerability in Secure Access prior to version 14.10. Attackers with access to the console can redirect victims to an arbitrary URL. The attack complexity is low, attack requirements are present, no privileges are required, and users must actively participate i...
CVE-2025-59767
Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and...
CVE-2025-59768
Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and...
CVE-2025-59768 Multiple vulnerabilities in AndSoft's e-TMS
Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and...
CVE-2025-59767
CVE-2025-59767 : AndSoft e-TMS is vulnerable to a reflected XSS in v25.03. The issue arises from lack of proper input filtering/escaping in parameters l, demo, demo2, TNTLOGIN, UO, and SuppConn in the endpoint /clt/LOGINFRM_LVE.ASP. An attacker can lure a user to a malicious URL to execute JavaSc...
CVE-2025-59746 Multiple vulnerabilities in AndSoft's e-TMS
Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'm' parameter in '/lib/asp/alert.asp'...
