3556 matches found
CVE-2025-49594
Summary : CVE-2025-49594 affects XWiki OIDC. From version 2.17.1 up to, but not including, 2.18.2, any user with VIEW access to another user’s profile can forge a token for that user. If the instance allows token authentication, this enables authentication as any user whose profile is viewable. I...
XWiki Platform SQL注入漏洞
XWiki Platform is XWiki's open source suite of Wiki platforms for creating web collaboration applications. A SQL injection vulnerability exists in XWiki Platform versions 4.3-milestone-1 through 16.10.9, 17.4.2, and prior to 17.5.0, which stems from an HQL injection in the orderField parameter an...
PT-2025-40900
Name of the Vulnerable Software and Affected Versions XWiki versions 2.17.1 through 2.18.1 Description XWiki OpenID Connect OIDC contains tools for manipulating the OpenID Connect protocol. Individuals with VIEW access to a user profile can generate a token for that user in versions prior to...
EUVD-2025-18286
Malicious code in bioql PyPI...
EUVD-2023-1188
Malicious code in bioql PyPI...
EUVD-2023-1180
Malicious code in bioql PyPI...
EUVD-2024-2843
Malicious code in bioql PyPI...
EUVD-2023-2705
Malicious code in bioql PyPI...
EUVD-2023-0937
Malicious code in bioql PyPI...
EUVD-2023-1728
Malicious code in bioql PyPI...
EUVD-2023-2232
Malicious code in bioql PyPI...
EUVD-2025-23461
Malicious code in bioql PyPI...
EUVD-2023-2962
Malicious code in bioql PyPI...
EUVD-2025-12169
Malicious code in bioql PyPI...
EUVD-2022-1713
Malicious code in bioql PyPI...
EUVD-2023-1714
Malicious code in bioql PyPI...
EUVD-2023-1481
Malicious code in bioql PyPI...
EUVD-2023-2666
Malicious code in bioql PyPI...