2885 matches found
CVE-2025-61777 FlagForge Allows Unauthenticated Badge Template API Access
Flag Forge is a Capture The Flag CTF platform. Starting in version 2.0.0 and prior to version 2.3.2, the /api/admin/badge-templates GET and /api/admin/badge-templates/create POST endpoints previously allowed access without authentication or authorization. This could have enabled unauthorized user...
CVE-2025-8726
The WP Photo Album Plus plugin for WordPress is vulnerable to Cross-Site Scripting in all versions up to, and including, 9.0.11.006 due to insufficient input sanitization and output escaping in the wppauserupload function. This makes it possible for authenticated attackers, with Subscriber-level...
CVE-2025-10692 OpenSupports 4.11.0 — SQL Injection
The endpoint POST /api/staff/get-new-tickets concatenates the user-controlled parameter departmentId directly into the SQL WHERE clause without parameter binding. As a result, an authenticated staff user level ≥ 1 can inject SQL to alter the filter logic, effectively bypassing department scoping...
EUVD-2025-26620
Malicious code in bioql PyPI...
EUVD-2023-26558
Malicious code in bioql PyPI...
EUVD-2025-32105
Malicious code in bioql PyPI...
EUVD-2022-24419
Malicious code in bioql PyPI...
EUVD-2022-24804
Malicious code in bioql PyPI...
EUVD-2022-25034
Malicious code in bioql PyPI...
EUVD-2022-25114
Malicious code in bioql PyPI...
EUVD-2024-54230
Malicious code in bioql PyPI...
EUVD-2025-5117
Malicious code in bioql PyPI...
EUVD-2024-34731
Malicious code in bioql PyPI...
EUVD-2024-51130
Malicious code in bioql PyPI...
EUVD-2022-33471
Malicious code in bioql PyPI...
EUVD-2023-57520
Malicious code in bioql PyPI...
EUVD-2023-45077
Malicious code in bioql PyPI...
EUVD-2023-31109
Malicious code in bioql PyPI...