EUVD-2025-22318

Malicious code in bioql PyPI...

EUVD-2025-22317

Malicious code in bioql PyPI...

EUVD-2025-22439

Malicious code in bioql PyPI...

CVE-2025-4296

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in HotelRunner B2B allows Forceful Browsing. This issue affects B2B: before 04.06.2025...

CVE-2025-4294

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in HotelRunner B2B allows Cross-Site Scripting XSS. This issue affects B2B: before 04.06.2025...

CVE-2025-4295

Improper Validation of Certificate with Host Mismatch vulnerability in HotelRunner B2B allows HTTP Response Splitting. This issue affects B2B: before 04.06.2025...

CVE-2025-4296

CVE-2025-4296 describes an Open Redirect vulnerability in HotelRunner B2B (before 04.06.2025). The issue affects HotelRunner B2B, enabling forceful browsing via untrusted URL redirection. Root cause is improper handling of redirects leading to navigation to external sites. Exploitation details ar...

PT-2025-30571

Name of the Vulnerable Software and Affected Versions HotelRunner B2B versions prior to 04.06.2025 Description An open redirect issue exists in HotelRunner B2B, potentially allowing forceful browsing through URL redirection to untrusted sites. Recommendations Update HotelRunner B2B to version...

CVE-2025-4295

Improper Validation of Certificate with Host Mismatch vulnerability in HotelRunner B2B allows HTTP Response Splitting. This issue affects B2B: before 04.06.2025...

CVE-2025-4294

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in HotelRunner B2B allows Cross-Site Scripting XSS. This issue affects B2B: before 04.06.2025...

CVE-2025-4295 Host Header Injection in HotelRunner's B2B

Improper Validation of Certificate with Host Mismatch vulnerability in HotelRunner B2B allows HTTP Response Splitting. This issue affects B2B: before 04.06.2025...

CVE-2025-4295 Host Header Injection in HotelRunner's B2B

Improper Validation of Certificate with Host Mismatch vulnerability in HotelRunner B2B allows HTTP Response Splitting. This issue affects B2B: before 04.06.2025...

CVE-2025-4295

HotelRunner B2B is affected by CVE-2025-4295 due to improper validation of TLS certificates with host mismatches, enabling HTTP response splitting. The issue impacts HotelRunner B2B versions prior to 04.06.2025. Root cause and affected component: certificate host name validation flaw in the B2B p...

CVE-2025-4294 XSS in HotelRunner's B2B

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in HotelRunner B2B allows Cross-Site Scripting XSS. This issue affects B2B: before 04.06.2025...

CVE-2025-4294

CVE-2025-4294: HotelRunner B2B has an XSS flaw due to improper neutralization of input during web page generation in versions prior to 04.06.2025. Affects HotelRunner B2B; impact is Cross-Site Scripting with potential user interaction required. Remediation: update to version 04.06.2025 or later. ...

CVE-2025-4294 XSS in HotelRunner's B2B

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in HotelRunner B2B allows Cross-Site Scripting XSS. This issue affects B2B: before 04.06.2025...

PT-2025-30417 · Unknown · Hotelrunner B2B

Name of the Vulnerable Software and Affected Versions: HotelRunner B2B versions prior to 04.06.2025 Description: This issue involves improper validation of certificates with host mismatches, leading to HTTP Response Splitting in HotelRunner B2B. Recommendations: Update HotelRunner B2B to version...

PT-2025-30416 · Hotelrunner · Hotelrunner B2B

Name of the Vulnerable Software and Affected Versions: HotelRunner B2B versions prior to 04.06.2025 Description: This issue allows for Cross-Site Scripting XSS. The vulnerability is due to improper neutralization of input during web page generation. Recommendations: Update HotelRunner B2B to...