2750 matches found
CVE-2025-61777
Flag Forge is a Capture The Flag CTF platform. Starting in version 2.0.0 and prior to version 2.3.2, the /api/admin/badge-templates GET and /api/admin/badge-templates/create POST endpoints previously allowed access without authentication or authorization. This could have enabled unauthorized user...
CVE-2025-61777 FlagForge Allows Unauthenticated Badge Template API Access
Flag Forge is a Capture The Flag CTF platform. Starting in version 2.0.0 and prior to version 2.3.2, the /api/admin/badge-templates GET and /api/admin/badge-templates/create POST endpoints previously allowed access without authentication or authorization. This could have enabled unauthorized user...
CVE-2025-8726
The WP Photo Album Plus plugin for WordPress is vulnerable to Cross-Site Scripting in all versions up to, and including, 9.0.11.006 due to insufficient input sanitization and output escaping in the wppauserupload function. This makes it possible for authenticated attackers, with Subscriber-level...
CVE-2025-10692 OpenSupports 4.11.0 — SQL Injection
The endpoint POST /api/staff/get-new-tickets concatenates the user-controlled parameter departmentId directly into the SQL WHERE clause without parameter binding. As a result, an authenticated staff user level ≥ 1 can inject SQL to alter the filter logic, effectively bypassing department scoping...
EUVD-2022-0904
Malicious code in bioql PyPI...
EUVD-2021-9062
Malicious code in bioql PyPI...
EUVD-2022-28963
Malicious code in bioql PyPI...
EUVD-2022-24419
Malicious code in bioql PyPI...
EUVD-2024-49608
Malicious code in bioql PyPI...
EUVD-2024-48494
Malicious code in bioql PyPI...
EUVD-2023-56328
Malicious code in bioql PyPI...
EUVD-2023-31109
Malicious code in bioql PyPI...
EUVD-2023-45743
Malicious code in bioql PyPI...
EUVD-2024-19800
Malicious code in bioql PyPI...
EUVD-2024-51134
Malicious code in bioql PyPI...
EUVD-2023-56330
Malicious code in bioql PyPI...
EUVD-2023-31137
Malicious code in bioql PyPI...
EUVD-2023-45742
Malicious code in bioql PyPI...