EUVD-2022-31835

Malicious code in bioql PyPI...

EUVD-2022-31836

Malicious code in bioql PyPI...

EUVD-2022-44074

Malicious code in bioql PyPI...

EUVD-2021-29120

Malicious code in bioql PyPI...

EUVD-2025-14715

Malicious code in bioql PyPI...

EUVD-2022-50737

Malicious code in bioql PyPI...

EUVD-2021-29080

Malicious code in bioql PyPI...

EUVD-2022-38378

Malicious code in bioql PyPI...

EUVD-2021-29076

Malicious code in bioql PyPI...

EUVD-2023-33405

Malicious code in bioql PyPI...

EUVD-2022-34026

Malicious code in bioql PyPI...

EUVD-2023-35894

Malicious code in bioql PyPI...

EUVD-2022-44075

Malicious code in bioql PyPI...

EUVD-2024-52815

Malicious code in bioql PyPI...

CVE-2024-33668

An issue was discovered in Zammad before 6.3.0. The Zammad Upload Cache uses insecure, partially guessable FormIDs to identify content. An attacker could try to brute force them to upload malicious content to article drafts they have no access to...

CVE-2024-33667

An issue was discovered in Zammad before 6.3.0. An authenticated agent could perform a remote Denial of Service attack by calling an endpoint that accepts a generic method name, which was not properly sanitized against an allowlist...

CVE-2024-33666

An issue was discovered in Zammad before 6.3.0. Users with customer access to a ticket could have accessed time accounting details of this ticket via the API. This data should be available only to agents...

CVE-2024-55578

Zammad before 6.4.1 places sensitive data such as authmicrosoftoffice365credentials and applicationsecret in log files...

CVE-2023-50456

An issue was discovered in Zammad before 6.2.0. An attacker can trigger phishing links in generated notification emails via a crafted first or last name...

CVE-2023-50453

An issue was discovered in Zammad before 6.2.0. It uses the public endpoint /api/v1/signshow for its login screen. This endpoint returns internal configuration data of user object attributes, such as selectable values, which should not be visible to the public...