EUVD-2024-1994

Malicious code in bioql PyPI...

CVE-2025-52122

Freeform 5.0.0 to before 5.10.16, a plugin for CraftCMS, contains an Server-side template injection SSTI vulnerability, resulting in arbitrary code injection for all users that have access to editing a form submission title...

CVE-2024-5658

The CraftCMS plugin Two-Factor Authentication through 3.3.3 allows reuse of TOTP tokens multiple times within the validity period...

CVE-2024-5657

The CraftCMS plugin Two-Factor Authentication in versions 3.3.1, 3.3.2 and 3.3.3 discloses the password hash of the currently authenticated user after submitting a valid TOTP...

PT-2024-36886

Name of the Vulnerable Software and Affected Versions CraftCMS plugin Two-Factor Authentication versions 3.3.3 and earlier Description The issue allows reuse of TOTP tokens multiple times within the validity period. Recommendations For versions 3.3.3 and earlier, update to a version that contains...

PT-2024-36875

Name of the Vulnerable Software and Affected Versions CraftCMS plugin Two-Factor Authentication versions 3.3.1 through 3.3.3 Description The issue discloses the password hash of the currently authenticated user after submitting a valid TOTP. Recommendations For versions 3.3.1 through 3.3.3,...