14 matches found
EUVD-2025-12360
Malicious code in bioql PyPI...
EUVD-2025-12356
Malicious code in bioql PyPI...
CVE-2025-28103
Incorrect access control in laskBlog v2.6.1 allows attackers to arbitrarily delete user accounts via a crafted request...
CVE-2025-28104
Incorrect access control in laskBlog v2.6.1 allows attackers to access all usernames via a crafted input...
CVE-2025-28104
Incorrect access control in laskBlog v2.6.1 allows attackers to access all usernames via a crafted input...
CVE-2025-28103
Incorrect access control in laskBlog v2.6.1 allows attackers to arbitrarily delete user accounts via a crafted request...
CVE-2025-28104
Incorrect access control in laskBlog v2.6.1 allows attackers to access all usernames via a crafted input...
CVE-2025-28103
The laskBlog application (version 2.6.1 ) is affected by an incorrect access control vulnerability. This flaw allows an attacker to arbitrarily delete user accounts by sending a crafted request. While no patch is currently available, it is recommended to restrict access to the account deletion fu...
CVE-2025-28104
The laskBlog blogging application, version 2.6.1 , is affected by an incorrect access control vulnerability. An attacker can provide a specially crafted input to bypass security measures and obtain all usernames from the system. As a temporary workaround, users are advised to restrict access to s...
CVE-2025-28104
Incorrect access control in laskBlog v2.6.1 allows attackers to access all usernames via a crafted input...
CVE-2025-28103
Incorrect access control in laskBlog v2.6.1 allows attackers to arbitrarily delete user accounts via a crafted request...
CVE-2025-28103
Incorrect access control in laskBlog v2.6.1 allows attackers to arbitrarily delete user accounts via a crafted request...
