EUVD-2024-52755

Malicious code in bioql PyPI...

EUVD-2023-44341

Malicious code in bioql PyPI...

EUVD-2024-2868

Malicious code in bioql PyPI...

EUVD-2022-38965

Malicious code in bioql PyPI...

EUVD-2024-44151

Malicious code in bioql PyPI...

EUVD-2022-2045

Malicious code in bioql PyPI...

EUVD-2024-48393

Malicious code in bioql PyPI...

EUVD-2022-34370

Malicious code in bioql PyPI...

EUVD-2024-16216

Malicious code in bioql PyPI...

EUVD-2022-39001

Malicious code in bioql PyPI...

EUVD-2025-5290

Malicious code in bioql PyPI...

EUVD-2024-3591

Malicious code in bioql PyPI...

CVE-2025-41097

Insecure Direct Object Reference IDOR vulnerability in BOLD Workplanner in versions prior to 2.5.25 4935b438f9b, consisting of a lack of adequate validation of user input, allowing an authenticated user to access to basic employee details using unauthorised internal identifiers...

CVE-2025-41099

Insecure Direct Object Reference IDOR vulnerability in BOLD Workplanner in versions prior to 2.5.25 4935b438f9b, consisting of a lack of adequate validation of user input, allowing an authenticated user to access to the list of permissions using unauthorised internal identifiers...

Liferay Portal Vulnerable to IDOR via audit events

Insecure Direct Object Reference IDOR vulnerability with audit events in Liferay Portal 7.4.0 through 7.4.3.117, and older unsupported versions, and Liferay DXP 2024.Q1.1 through 2024.Q1.5, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported...

CVE-2025-41096

Insecure Direct Object Reference IDOR vulnerability in BOLD Workplanner in versions prior to 2.5.25 4935b438f9b, consisting of a lack of adequate validation of user input, allowing an authenticated user to access to the dates of the current contract details using unauthorised internal identifiers...

CVE-2025-41092

Summary: CVE-2025-41092 affects Bold Workplanner. Vulnerability: Insecure Direct Object Reference (IDOR) due to insufficient input validation, enabling an authenticated user to access time record details via unauthorized internal identifiers. Affected versions: Bold Workplanner

CVE-2025-43810

Insecure Direct Object Reference IDOR vulnerability with commerce order notes in Liferay Portal 7.3.5 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 2023.Q4.8, 2023.Q3.1 through 2023.Q3.10, and 7.4 GA through update 92 allows remote authenticated users to from one virtual instance to add a...

CVE-2025-58012 WordPress Content Mask plugin <= 1.8.5.3 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Alex Content Mask content-mask allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Content Mask: from n/a through = 1.8.5.3...

CVE-2025-0875

Summary: CVE-2025-0875 affects PROLIZ OBS (Student Affairs Information System) prior to version 26.0328. The issue is an authorization bypass caused by a user-controlled key, enabling parameter injection. The vulnerability impact includes a potential bypass of access controls with high privileges...