236 matches found
EUVD-2021-15670
Malware in sbrugna...
EUVD-2021-15669
Malware in sbrugna...
EUVD-2019-16767
Malware in sbrugna...
EUVD-2017-1507
Malware in sbrugna...
EUVD-2017-9349
Malware in sbrugna...
EUVD-2024-50890
Malicious code in bioql PyPI...
EUVD-2024-54327
Malicious code in bioql PyPI...
EUVD-2024-50806
Malicious code in bioql PyPI...
EUVD-2023-27111
Malicious code in bioql PyPI...
EUVD-2024-51041
Malicious code in bioql PyPI...
CVE-2024-12478
A vulnerability was found in InvoicePlane up to 1.6.1. It has been declared as critical. This vulnerability affects the function uploadfile of the file /index.php/upload/uploadfile/1/1. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The...
CVE-2024-12667
A vulnerability was found in InvoicePlane up to 1.6.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /invoices/view. The manipulation leads to session expiration. The attack may be launched remotely. The complexity of an attack is rather high. The...
CVE-2024-12362
A vulnerability was found in InvoicePlane up to 1.6.1. It has been classified as problematic. This affects the function download of the file invoices.php. The manipulation of the argument invoice leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclos...
CVE-2023-23011
Cross Site Scripting XSS vulnerability in InvoicePlane 1.6 via filterproduct input to file modalproductlookups.php...
CVE-2021-29024
In InvoicePlane 1.5.11 a misconfigured web server allows unauthenticated directory listing and file download. Allowing an attacker to directory traversal and download files suppose to be private without authentication...
CVE-2021-29022
In InvoicePlane 1.5.11, the upload feature discloses the full path of the file upload directory...
CVE-2021-29023
InvoicePlane 1.5.11 doesn't have any rate-limiting for password reset and the reset token is generated using a weak mechanism that is predictable...
CVE-2017-1000238
InvoicePlane version 1.4.10 is vulnerable to a Arbitrary File Upload resulting in an authenticated user can upload a malicious file to the webserver. It is possible for an attacker to upload a script which is able to compromise the webserver...
CVE-2017-1000239
InvoicePlane version 1.4.10 is vulnerable to a Stored Cross Site Scripting resulting in allowing an authenticated user to inject malicious client side script which will be executed in the browser of users if they visit the manipulated site...