EUVD-2023-26778

Malicious code in bioql PyPI...

EUVD-2022-46484

Malicious code in bioql PyPI...

EUVD-2021-34144

Malicious code in bioql PyPI...

EUVD-2025-14597

Malicious code in bioql PyPI...

EUVD-2025-20136

Malicious code in bioql PyPI...

EUVD-2022-27478

Malicious code in bioql PyPI...

EUVD-2024-33919

Malicious code in bioql PyPI...

EUVD-2023-37405

Malicious code in bioql PyPI...

EUVD-2021-31679

Malicious code in bioql PyPI...

EUVD-2021-9336

Malicious code in bioql PyPI...

EUVD-2025-20836

Malicious code in bioql PyPI...

EUVD-2025-22327

Malicious code in bioql PyPI...

EUVD-2023-38506

Malicious code in bioql PyPI...

EUVD-2023-39164

Malicious code in bioql PyPI...

EUVD-2022-47728

Malicious code in bioql PyPI...

EUVD-2023-44776

Malicious code in bioql PyPI...

CVE-2025-9209: Exposure of Sensitive Information to an Unauthorized Actor

The RestroPress – Online Food Ordering System plugin for WordPress is vulnerable to Authentication Bypass in versions 3.0.0 to 3.1.9.2. This is due to the plugin exposing user private tokens and API data via the /wp-json/wp/v2/users REST API endpoint. This makes it possible for unauthenticated...

e-learning 安全特征问题漏洞

e-learning is an exam system for youth-is-as-pale-as-poetry individual developers. A security feature issue vulnerability exists in e-learning version 1.0, which stems from insufficient generation of random values by the encryptSecret function in the JwtUtils.java file in the JWT Token Handler...

CVE-2025-10671: Use of Insufficiently Random Values

A vulnerability has been found in youth-is-as-pale-as-poetry e-learning 1.0. Impacted is the function encryptSecret of the file e-learning-master\exam-api\src\main\java\com\yf\exam\ability\shiro\jwt\JwtUtils.java of the component JWT Token Handler. The manipulation leads to insufficiently random...

Flask App Builder 授权问题漏洞

Flask App Builder is a simple and fast application development framework by Daniel Vaz Gaspar Personal Developer. An authorization issue vulnerability exists in Flask App Builder versions prior to 4.8.1, which stems from not disabling the password reset feature when using a non-database...