239 matches found
EUVD-2021-1741
Malware in sbrugna...
EUVD-2021-1945
Malware in sbrugna...
EUVD-2021-0484
Malware in sbrugna...
EUVD-2022-0712
Malicious code in bioql PyPI...
EUVD-2024-54196
Malicious code in bioql PyPI...
EUVD-2025-25449
Malicious code in bioql PyPI...
EUVD-2024-54197
Malicious code in bioql PyPI...
EUVD-2025-32055
Malicious code in bioql PyPI...
EUVD-2025-6153
Malicious code in bioql PyPI...
CVE-2025-34216
Vasion Print formerly PrinterLogic Virtual Appliance Host prior to version 22.0.1026 and Application prior to version 20.0.2702 VA deployments only expose a set of unauthenticated REST API endpoints that return configuration files and clear‑text passwords. The same endpoints also disclose the...
Academico 代码问题漏洞
Academico is a Lavarel-based elementary and middle school school management platform from Academico Open Source. Academico has a code issue vulnerability that stems from a missing upload restriction in the file/edit-photo function, which could lead to a remote upload attack...
Cross-site Scripting (XSS)
Overview snipe/snipe-it is an asset management system built on Laravel. Affected versions of this package are vulnerable to Cross-site Scripting XSS via improper input validation in the process responsible for handling user-supplied data. An attacker can execute arbitrary scripts in the context o...
CVE-2025-58163
FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Versions 1.8.185 and earlier contain a deserialization of untrusted data vulnerability that allows authenticated attackers with knowledge of the application's APPKEY to achieve remote code execution. The...
CVE-2025-58163 FreeScout's deserialization of untrusted data can lead to Remote Code Execution
FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Versions 1.8.185 and earlier contain a deserialization of untrusted data vulnerability that allows authenticated attackers with knowledge of the application's APPKEY to achieve remote code execution. The...
CVE-2025-58163 FreeScout's deserialization of untrusted data can lead to Remote Code Execution
FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Versions 1.8.185 and earlier contain a deserialization of untrusted data vulnerability that allows authenticated attackers with knowledge of the application's APPKEY to achieve remote code execution. The...
ModStartCMS 安全漏洞
ModStartCMS is a Laravel-based modular extremely fast development framework from ModStart. A security vulnerability exists in ModStartCMS version v9.5.0, which originates from an arbitrary file write and could lead to the execution of malicious commands to obtain sensitive data...
CVE-2025-55743
UnoPim is an open-source Product Information Management PIM system built on the Laravel framework. Before 0.2.1, the image upload at the user creation feature performs only client side file type validation. A user can capture the request by uploading an image, capture the request through a Proxy...
CVE-2025-55744
UnoPim is an open-source Product Information Management PIM system built on the Laravel framework. Before 0.2.1, some of the endpoints of the application is vulnerable to Cross site Request forgery CSRF. This vulnerability is fixed in 0.2.1...
CVE-2025-55742
UnoPim is an open-source Product Information Management PIM system built on the Laravel framework. Before 0.2.1, UnoPim contains a stored cross-site scripting vulnerability via SVG MIME/sanitizer bypass in the /admin/settings/users/create endpoint. This vulnerability is fixed in 0.2.1...
