408 matches found
EUVD-2022-47728
Malicious code in bioql PyPI...
EUVD-2021-34144
Malicious code in bioql PyPI...
EUVD-2025-16789
Malicious code in bioql PyPI...
EUVD-2022-7158
Malicious code in bioql PyPI...
EUVD-2021-32162
Malicious code in bioql PyPI...
EUVD-2025-20836
Malicious code in bioql PyPI...
EUVD-2023-2786
Malicious code in bioql PyPI...
EUVD-2023-2662
Malicious code in bioql PyPI...
EUVD-2025-14597
Malicious code in bioql PyPI...
EUVD-2024-33919
Malicious code in bioql PyPI...
EUVD-2023-44776
Malicious code in bioql PyPI...
e-learning 安全特征问题漏洞
e-learning is an exam system for youth-is-as-pale-as-poetry individual developers. A security feature issue vulnerability exists in e-learning version 1.0, which stems from insufficient generation of random values by the encryptSecret function in the JwtUtils.java file in the JWT Token Handler...
Flask App Builder 授权问题漏洞
Flask App Builder is a simple and fast application development framework by Daniel Vaz Gaspar Personal Developer. An authorization issue vulnerability exists in Flask App Builder versions prior to 4.8.1, which stems from not disabling the password reset feature when using a non-database...
CVE-2025-58761 Tautulli vulnerable to Unauthenticated Path Traversal in `real_pms_image_proxy`
Tautulli is a Python based monitoring and tracking tool for Plex Media Server. The realpmsimageproxy endpoint in Tautulli v2.15.3 and prior is vulnerable to path traversal, allowing unauthenticated attackers to read arbitrary files from the application server's filesystem. The realpmsimageproxy i...
Linux Distros Unpatched Vulnerability : CVE-2021-22190
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A path traversal vulnerability via the GitLab Workhorse in all versions of GitLab could result in the leakage of a JWT token CVE-2021-22190 Note that Nessus...
CVE-2025-51054
Vedo Suite 2024.17 is vulnerable to Incorrect Access Control, which allows remote attackers to obtain a valid high privilege JWT token without prior authentication via sending an empty HTTP POST request to the /autologin/ API endpoint...
CVE-2025-51054
Vedo Suite 2024.17 is vulnerable to Incorrect Access Control, which allows remote attackers to obtain a valid high privilege JWT token without prior authentication via sending an empty HTTP POST request to the /autologin/ API endpoint...
CVE-2025-51054
Vedo Suite 2024.17 is affected by an Incorrect Access Control vulnerability that lets remote attackers obtain a valid high‑privilege JWT token without authentication by sending an empty POST to the /autologin/ endpoint. The issue’s impact is elevated privileges via a JWT; affected software is Ved...
CVE-2025-51054
Vedo Suite 2024.17 is vulnerable to Incorrect Access Control, which allows remote attackers to obtain a valid high privilege JWT token without prior authentication via sending an empty HTTP POST request to the /autologin/ API endpoint...