214 matches found
EUVD-2021-0503
Malware in sbrugna...
EUVD-2025-7808
Malicious code in bioql PyPI...
EUVD-2023-0303
Malicious code in bioql PyPI...
EUVD-2022-3907
Malicious code in bioql PyPI...
EUVD-2023-2223
Malicious code in bioql PyPI...
EUVD-2022-4697
Malicious code in bioql PyPI...
EUVD-2022-7273
Malicious code in bioql PyPI...
EUVD-2023-0408
Malicious code in bioql PyPI...
EUVD-2023-0489
Malicious code in bioql PyPI...
EUVD-2022-6494
Malicious code in bioql PyPI...
EUVD-2023-1112
Malicious code in bioql PyPI...
CVE-2024-21641
Flarum is open source discussion platform software. Prior to version 1.8.5, the Flarum /logout route includes a redirect parameter that allows any third party to redirect users from a trusted domain of the Flarum installation to redirect to any link. For logged-in users, the logout must be...
CVE-2023-22488
Flarum is a forum software for building communities. Using the notifications feature, one can read restricted/private content and bypass access checks that would be in place for such content. The notification-sending component does not check that the subject of the notification can be seen by the...
CVE-2023-22487
Flarum is a forum software for building communities. Using the mentions feature provided by the flarum/mentions extension, users can mention any post ID on the forum with the special @""p syntax. The following behavior never changes no matter if the actor should be able to read the mentioned post...
CVE-2023-22489
Flarum is a discussion platform for websites. If the first post of a discussion is permanently deleted but the discussion stays visible, any actor who can view the discussion is able to create a new reply via the REST API, no matter the reply permission or lock status. This includes users that...
CVE-2023-27577
flarum is a forum software package for building communities. In versions prior to 1.7.0 an admin account which has already been compromised by an attacker may use a vulnerability in the LESS parser which can be exploited to read sensitive files on the server through the use of path traversal...
CVE-2021-21283
Flarum is an open source discussion platform for websites. The "Flarum Sticky" extension versions 0.1.0-beta.14 and 0.1.0-beta.15 has a cross-site scripting vulnerability. A change in release beta 14 of the Sticky extension caused the plain text content of the first post of a pinned discussion to...
CVE-2021-32671
Flarum is a forum software for building communities. Flarum's translation system allowed for string inputs to be converted into HTML DOM nodes when rendered. This change was made after v0.1.0-beta.16 our last beta before v1.0.0 and was not noticed or documented. This allowed for any user to type...