CVE-2025-70997

A vulnerability has been discovered in eladmin v2.7 and before. This vulnerability allows for an arbitrary user password reset under any user permission level...

CVE-2025-70997

CVE-2025-70997 affects eladmin versions 2.7 and earlier. The connected sources describe a vulnerability that allows an arbitrary user password reset under any user permission level, implying a weakness in authentication/authorization that enables password resets without sufficient privileges. The...

EUVD-2025-206813

A vulnerability has been discovered in eladmin v2.7 and before. This vulnerability allows for an arbitrary user password reset under any user permission level...

CVE-2025-70997

A vulnerability has been discovered in eladmin v2.7 and before. This vulnerability allows for an arbitrary user password reset under any user permission level...

PT-2026-5989

A vulnerability has been discovered in eladmin v2.7 and before. This vulnerability allows for an arbitrary user password reset under any user permission level...

ELADMIN 安全漏洞

ELADMIN is a backend management system developed by elunez’s individual developer. Versions of ELADMIN 2.7 and earlier contained security vulnerabilities. These vulnerabilities stemmed from a vulnerability allowing arbitrary user password resets, which could lead to password resets at any user...

EUVD-2025-25399

Malicious code in bioql PyPI...

EUVD-2024-48379

Malicious code in bioql PyPI...

EUVD-2025-3061

Malicious code in bioql PyPI...

EUVD-2025-15096

Malicious code in bioql PyPI...

EUVD-2025-9758

Malicious code in bioql PyPI...

EUVD-2025-27107

Malicious code in bioql PyPI...

EUVD-2025-27024

Malicious code in bioql PyPI...

EUVD-2025-23562

Malicious code in bioql PyPI...

EUVD-2025-25382

Malicious code in bioql PyPI...

EUVD-2025-26659

Malicious code in bioql PyPI...

EUVD-2024-41068

Malicious code in bioql PyPI...

EUVD-2024-41067

Malicious code in bioql PyPI...

CVE-2025-10084

A vulnerability was identified in elunez eladmin up to 2.7. This affects the function queryErrorLogDetail of the file /api/logs/error/1 of the component SysLogController. The manipulation leads to improper authorization. It is possible to initiate the attack remotely. The exploit is publicly...

CVE-2025-10084

A vulnerability was identified in elunez eladmin up to 2.7. This affects the function queryErrorLogDetail of the file /api/logs/error/1 of the component SysLogController. The manipulation leads to improper authorization. It is possible to initiate the attack remotely. The exploit is publicly...