EUVD-2022-45252

Malicious code in bioql PyPI...

EUVD-2025-22319

Malicious code in bioql PyPI...

EUVD-2022-41352

Malicious code in bioql PyPI...

EUVD-2023-58737

Malicious code in bioql PyPI...

EUVD-2022-30141

Malicious code in bioql PyPI...

EUVD-2022-2225

Malicious code in bioql PyPI...

EUVD-2025-15023

Malicious code in bioql PyPI...

EUVD-2024-46819

Malicious code in bioql PyPI...

EUVD-2022-24673

Malicious code in bioql PyPI...

EUVD-2024-33121

Malicious code in bioql PyPI...

EUVD-2021-29606

Malicious code in bioql PyPI...

EUVD-2024-2850

Malicious code in bioql PyPI...

EUVD-2025-4859

Malicious code in bioql PyPI...

EUVD-2023-59666

Malicious code in bioql PyPI...

EUVD-2025-13652

Malicious code in bioql PyPI...

Kazaar 安全漏洞

Kazaar is a print marketing fulfillment platform from Kazaar, Inc. A security vulnerability exists in Kazaar version 1.25.12 that stems from allowing modification of the order-id parameter, which could lead to an insecure direct object reference attack...

CVE-2025-59687: Authorization Bypass Through User-Controlled Key

IMPAQTR Aurora before 1.36 allows Insecure Direct Object Reference attacks against the users list, organization details, bookmarks, and notifications of an arbitrary organization...

CVE-2025-43827

Insecure Direct Object Reference IDOR vulnerability with audit events in Liferay Portal 7.4.0 through 7.4.3.117, and older unsupported versions, and Liferay DXP 2024.Q1.1 through 2024.Q1.5, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported...

CVE-2025-41097

Insecure Direct Object Reference IDOR vulnerability in BOLD Workplanner in versions prior to 2.5.25 4935b438f9b, consisting of a lack of adequate validation of user input, allowing an authenticated user to access to basic employee details using unauthorised internal identifiers...

CVE-2025-41095

Insecure Direct Object Reference IDOR vulnerability in BOLD Workplanner in versions prior to 2.5.25 4935b438f9b, consisting of a lack of adequate validation of user input, allowing an authenticated user to access to planning counter details using unauthorised internal identifiers...