EUVD-2022-32377

Malicious code in bioql PyPI...

EUVD-2025-29658

Malicious code in bioql PyPI...

EUVD-2022-42653

Malicious code in bioql PyPI...

EUVD-2024-0563

Malicious code in bioql PyPI...

EUVD-2022-24543

Malicious code in bioql PyPI...

EUVD-2023-2916

Malicious code in bioql PyPI...

EUVD-2023-44234

Malicious code in bioql PyPI...

EUVD-2025-7030

Malicious code in bioql PyPI...

EUVD-2022-42825

Malicious code in bioql PyPI...

EUVD-2023-54140

Malicious code in bioql PyPI...

EUVD-2022-42903

Malicious code in bioql PyPI...

EUVD-2023-48571

Malicious code in bioql PyPI...

EUVD-2025-18109

Malicious code in bioql PyPI...

Flag Forge 访问控制错误漏洞

Flag Forge is an easy-to-use CTF platform open-sourced by FlagForge. An access control error vulnerability exists in Flag Forge versions 2.0.0 through prior to 2.3.1, which stems from a lack of proper authentication and authorization in the /api/resources endpoint, which could result in an...

WordPress plugin DethemeKit For Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

GHSA-5PP7-M8X8-RC82 Liferay Portal allows remote attackers to view display page templates via crafted URLs

Liferay Portal 7.3.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, and 7.3 GA through update 35 does not perform an authorization check when users attempt to view a display page template, which allows remote attackers to view display page...

CVE-2025-43805

CVE-2025-43805 affects Liferay Portal 7.3.0 through 7.4.3.111 and Liferay DXP 2023.Q4.0, 2023.Q3.1–2023.Q3.4, 7.4 GA up to update 92, and 7.3 GA up to update 35, where the system fails to perform an authorization check when viewing a display page template. This allows an unauthenticated, remote a...

CVE-2025-59017 Broken Access Control in Backend AJAX Routes

Missing authorization checks in the Backend Routing of TYPO3 CMS versions 9.0.0‑9.5.54, 10.0.0‑10.4.53, 11.0.0‑11.5.47, 12.0.0‑12.4.36, and 13.0.0‑13.4.17 allow backend users to directly invoke AJAX backend routes without having access to the corresponding backend modules...

SAP HCM Approve Timesheets 安全漏洞

SAP HCM Approve Timesheets is a transactional application from SAP, Germany. A security vulnerability exists in SAP HCM Approve Timesheets version 2.0, which stems from a lack of authorization checking and could lead to elevated privileges...

WordPress plugin HAPPY 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...