2885 matches found
CVE-2025-61777 FlagForge Allows Unauthenticated Badge Template API Access
Flag Forge is a Capture The Flag CTF platform. Starting in version 2.0.0 and prior to version 2.3.2, the /api/admin/badge-templates GET and /api/admin/badge-templates/create POST endpoints previously allowed access without authentication or authorization. This could have enabled unauthorized user...
CVE-2025-8726
The WP Photo Album Plus plugin for WordPress is vulnerable to Cross-Site Scripting in all versions up to, and including, 9.0.11.006 due to insufficient input sanitization and output escaping in the wppauserupload function. This makes it possible for authenticated attackers, with Subscriber-level...
CVE-2025-10692 OpenSupports 4.11.0 — SQL Injection
The endpoint POST /api/staff/get-new-tickets concatenates the user-controlled parameter departmentId directly into the SQL WHERE clause without parameter binding. As a result, an authenticated staff user level ≥ 1 can inject SQL to alter the filter logic, effectively bypassing department scoping...
EUVD-2025-16104
Malicious code in bioql PyPI...
EUVD-2025-26620
Malicious code in bioql PyPI...
EUVD-2023-26558
Malicious code in bioql PyPI...
EUVD-2024-32000
Malicious code in bioql PyPI...
EUVD-2025-32105
Malicious code in bioql PyPI...
EUVD-2025-28037
Malicious code in bioql PyPI...
EUVD-2025-28580
Malicious code in bioql PyPI...
EUVD-2025-29341
Malicious code in bioql PyPI...
EUVD-2022-0904
Malicious code in bioql PyPI...
EUVD-2025-12167
Malicious code in bioql PyPI...
EUVD-2022-41782
Malicious code in bioql PyPI...
EUVD-2022-24419
Malicious code in bioql PyPI...
EUVD-2022-24804
Malicious code in bioql PyPI...
EUVD-2022-24880
Malicious code in bioql PyPI...
EUVD-2022-25034
Malicious code in bioql PyPI...