EUVD-2025-16452

Malicious code in bioql PyPI...

EUVD-2024-26215

Malicious code in bioql PyPI...

EUVD-2024-25310

Malicious code in bioql PyPI...

EUVD-2025-16449

Malicious code in bioql PyPI...

EUVD-2025-22772

Malicious code in bioql PyPI...

EUVD-2025-16488

Malicious code in bioql PyPI...

PT-2025-35650

Name of the Vulnerable Software and Affected Versions: FreeScout versions 1.8.185 and earlier Description: FreeScout is a help desk and shared inbox built with PHP’s Laravel framework. Versions prior to 1.8.186 contain a deserialization of untrusted data issue that allows authenticated attackers...

PT-2025-106: Local file read leads to Server-Side Request Forgery (SSRF) in FreeScout

The vulnerability was identified in FreeScout, version 1.8.182. The discovered vulnerability allows an attacker to read server‑side files and issue requests to the local network, resulting in a Server‑Side Request Forgery SSRF condition. Vulnerability status: Confirmed by vendor Date of...

PT-2025-116: Server‑Side Request Forgery (SSRF) in FreeScout

The vulnerability was identified in FreeScout , versions 1.8.182. The discovered vulnerability allows an attacker to issue requests to restricted‑access servers, enabling internal‑network reconnaissance and subsequent attacks. Vulnerability status: Confirmed by vendor Date of vulnerability...

PT-2025-112: Stored XSS in FreeScout

The vulnerability was identified in FreeScout, version 1.8.182. The discovered vulnerability allows an attacker to inject arbitrary HTML tags and JavaScript into web pages, resulting in execution of malicious code in the victim’s browser. Vulnerability status: Confirmed by vendor Date of...

CVE-2025-54366

FreeScout is a lightweight free open source help desk and shared inbox built with PHP Laravel framework. In versions 1.8.185 and below, there is a critical deserialization vulnerability in the /conversation/ajax endpoint that allows authenticated users with knowledge of the APPKEY to achieve remo...

CVE-2025-54366

FreeScout is a lightweight free open source help desk and shared inbox built with PHP Laravel framework. In versions 1.8.185 and below, there is a critical deserialization vulnerability in the /conversation/ajax endpoint that allows authenticated users with knowledge of the APPKEY to achieve remo...

CVE-2025-54366 FreeScout's deserialization of untrusted data leads to Remote Code Execution

FreeScout is a lightweight free open source help desk and shared inbox built with PHP Laravel framework. In versions 1.8.185 and below, there is a critical deserialization vulnerability in the /conversation/ajax endpoint that allows authenticated users with knowledge of the APPKEY to achieve remo...

CVE-2025-54366 FreeScout's deserialization of untrusted data leads to Remote Code Execution

FreeScout is a lightweight free open source help desk and shared inbox built with PHP Laravel framework. In versions 1.8.185 and below, there is a critical deserialization vulnerability in the /conversation/ajax endpoint that allows authenticated users with knowledge of the APPKEY to achieve remo...

PT-2025-30950 · Freescout · Freescout

Name of the Vulnerable Software and Affected Versions: FreeScout versions prior to 1.8.186 Description: FreeScout is a lightweight free open source help desk and shared inbox built with PHP Laravel framework. Versions prior to 1.8.186 contain a critical deserialization vulnerability in the...

The vulnerability of the FreeScout support service management system lies in the improper implementation of the sequence of actions to be performed, allowing a intruder to gain unauthorized access to the system’s functional capabilities.

The vulnerability of the FreeScout support service management system is related to the improper implementation of the sequence of actions to be performed. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to the system’s functions...

The vulnerability of the FreeScout support service management system lies in the lack of measures to protect the website structure. This allows attackers to disclose confidential information and gain control over user sessions.

The vulnerability of the FreeScout support service management system lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to disclose confidential information and gain control over user sessions...

The vulnerability of the FreeScout support service management system, which arises due to the failure to address the issue of CRLF sequences (returning a carriage followed by a line break), allows a hacker to execute arbitrary code.

The vulnerability of the FreeScout support service management system exists due to the lack of measures to neutralize CRLF sequences returning the cursor after translating a line. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending special characters into the...

The vulnerability of the FreeScout support service management system lies in the improper implementation of the sequence of actions to be performed, allowing a intruder to gain unauthorized access to the system’s functional capabilities.

The vulnerability of the FreeScout support service management system is related to the improper implementation of the sequence of actions to be performed. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to the system’s functions...

The vulnerability of the FreeScout support service management system lies in the lack of measures to protect the website structure. This allows attackers to disclose confidential information and gain control over user sessions.

The vulnerability of the FreeScout support service management system lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to disclose confidential information and gain control over user sessions...