174 matches found
CVE-2018-12290
The Yii2-StateMachine extension v2.x.x for Yii2 has XSS...
EUVD-2019-0714
Malware in sbrugna...
EUVD-2021-2128
Malware in sbrugna...
EUVD-2021-2074
Malware in sbrugna...
EUVD-2025-7345
Malicious code in bioql PyPI...
EUVD-2023-2454
Malicious code in bioql PyPI...
EUVD-2024-2024
Malicious code in bioql PyPI...
EUVD-2022-7771
Malicious code in bioql PyPI...
EUVD-2023-3310
Malicious code in bioql PyPI...
EUVD-2024-2144
Malicious code in bioql PyPI...
EUVD-2023-0322
Malicious code in bioql PyPI...
EUVD-2022-7661
Malicious code in bioql PyPI...
EUVD-2023-3295
Malicious code in bioql PyPI...
EUVD-2022-2718
Malicious code in bioql PyPI...
EUVD-2025-7898
Malicious code in bioql PyPI...
The vulnerability of the yiisoft/yii2-redis framework in Yii, which allows attackers to expose protected information.
The vulnerability of the yiisoft/yii2-redis framework in Yii is related to the exposure of information through registration files. Exploiting this vulnerability allows a malicious actor to disclose protected information through the AUTH parameter...
Sensitive Information Disclosure
yiisoft/yii2-redis is vulnerable to Sensitive Information Disclosure. The vulnerability is due to information disclosure due to authentication credentials username and password being logged in plain text during failed connection attempts...
yii2-redis 日志信息泄露漏洞
yii2-redis is an extension to yii open source. A log information disclosure vulnerability exists in yii2-redis versions prior to 2.0.20, which stems from the explicit logging of the AUTH parameter in the logs, which could lead to credential disclosure...
CVE-2023-50714
yii2-authclient is an extension that adds OpenID, OAuth, OAuth2 and OpenId Connect consumers for the Yii framework 2.0. In yii2-authclient prior to version 2.2.15, the Oauth2 PKCE implementation is vulnerable in 2 ways. First, the authCodeVerifier should be removed after usage similar to authStat...