GHSA-3GP5-Q4JW-3V94 Budibase: Basic app users can exfiltrate stored REST datasource auth by rewriting datasource base URL

Summary Budibase stores external REST datasource credentials server-side and documents that database credentials are applied server-side and are not exposed in the UI. The REST datasource implementation redacts stored Basic/Bearer/OAuth2 auth secrets before returning datasource data to clients...

EUVD-2005-4146

Malware in sbrugna...

EUVD-2018-2182

Malware in sbrugna...

EUVD-2019-16128

Malware in sbrugna...

EUVD-2016-3635

Malware in sbrugna...

EUVD-2014-9698

Malware in sbrugna...

EUVD-2024-52623

Malicious code in bioql PyPI...

EUVD-2021-7181

Malicious code in bioql PyPI...

EUVD-2024-47108

Malicious code in bioql PyPI...

EUVD-2024-50997

Malicious code in bioql PyPI...

EUVD-2022-48074

Malicious code in bioql PyPI...

EUVD-2022-32865

Malicious code in bioql PyPI...

EUVD-2024-50778

Malicious code in bioql PyPI...

EUVD-2022-39283

Malicious code in bioql PyPI...

EUVD-2023-27490

Malicious code in bioql PyPI...

form-data uses unsafe random function in form-data for choosing boundary

Summary form-data uses Math.random to select a boundary value for multipart form-encoded data. This can lead to a security issue if an attacker: 1. can observe other values produced by Math.random in the target application, and 2. can control one field of a request made using form-data Because th...

CVE-2025-53823

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. Versions prior to 3.4.5 have a SQL Injection vulnerability in the endpoint /WeGIA/html/socio/sistema/processadeletarsocio.php, in the idsocio parameter. This vulnerability allows the execution...

CVE-2025-48475

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the System does not provide a check on which "clients" of the System an authorized user can view and edit, and which ones they cannot. As a result, an authorized user who does not have access to any of the...

CVE-2022-3558

The Import and export users and customers WordPress plugin before 1.20.5 does not properly escape data when exporting it via CSV files...

CVE-2025-32924

CVE-2025-32924 concerns the WordPress plugin Revy (Roninwp Revy). Affected versions are