EUVD-2025-8741

Malicious code in bioql PyPI...

CVE-2025-3021

CVE-2025-3021 is a path traversal vulnerability in e-solutions e-management. The issue allows an attacker to access confidential files outside the intended scope by manipulating the file parameter in the /downloadReport.php endpoint. The CVSS 4.0 base shows a high impact (8.7) with network attack...

CVE-2025-3021: Improper Limitation of a Pathname to a Restricted Directory

Path Traversal vulnerability in e-solutions e-management. This vulnerability could allow an attacker to access confidential files outside the expected scope via the ‘file’ parameter in the /downloadReport.php endpoint...

PT-2025-13682

Name of the Vulnerable Software and Affected Versions e-solutions e-management affected versions not specified Description The issue allows an attacker to access confidential files outside the expected scope via the file parameter in the "/downloadReport.php" endpoint. This could potentially lead...