EUVD-2021-1958

Malware in sbrugna...

EUVD-2021-1937

Malware in sbrugna...

EUVD-2021-1725

Malware in sbrugna...

EUVD-2021-1674

Malware in sbrugna...

EUVD-2021-2160

Malware in sbrugna...

EUVD-2021-2376

Malware in sbrugna...

EUVD-2021-2086

Malware in sbrugna...

EUVD-2022-2585

Malicious code in bioql PyPI...

CVE-2023-1788

Insufficient Session Expiration in GitHub repository firefly-iii/firefly-iii prior to 6...

CVE-2021-3901

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3819

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-4015

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3851

firefly-iii is vulnerable to URL Redirection to Untrusted Site...

CVE-2021-3921

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2021-3730

firefly-iii is vulnerable to Cross-Site Request Forgery CSRF...

PT-2024-40020 · Microsoft · Office Excel

Name of the Vulnerable Software and Affected Versions: Firefly III affected versions not specified Description: The issue allows unauthorized access or data manipulation through CSV injection, where untrusted user input in CSV files can lead to malicious actions. The web application has an "Expor...

firefly-iii 代码问题漏洞

firefly-iii is a free and open source personal finance manager. A code issue vulnerability exists in versions prior to firefly-iii 6, which stems from the presence of an insufficient session expiration time...

PT-2023-17246 · Unknown · Firefly-Iii

Name of the Vulnerable Software and Affected Versions: Firefly III versions prior to 6.0.0 Description: The issue is related to insufficient session expiration in the Firefly III GitHub repository. This means that sessions are not properly closed after a certain period of inactivity or when a use...

firefly-iii Cross-Site Request Forgery Vulnerability

firefly-iii is a free open source personal finance manager. A cross-site request forgery vulnerability exists in firefly-ii, which can be exploited by attackers to launch cross-site request forgery CSRF attacks...

Unrestricted file upload

firefly-iii is vulnerable to Unrestricted Upload of File with Dangerous Type...