Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

14 matches found

EUVD
EUVD•added 2025/10/03 8:07 p.m.•14 views

EUVD-2025-12360

Malicious code in bioql PyPI...

6.4CVSS6.5AI score0.00221EPSS
SaveExploits0References3
EUVD
EUVD•added 2025/10/03 8:07 p.m.•13 views

EUVD-2025-12356

Malicious code in bioql PyPI...

9.1CVSS6.5AI score0.00398EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE•added 2025/04/26 5:29 a.m.•12 views

CVE-2025-28103

Incorrect access control in laskBlog v2.6.1 allows attackers to arbitrarily delete user accounts via a crafted request...

6.4CVSS6.8AI score0.00221EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE•added 2025/04/26 5:05 a.m.•27 views

CVE-2025-28104

Incorrect access control in laskBlog v2.6.1 allows attackers to access all usernames via a crafted input...

9.1CVSS6.8AI score0.00398EPSS
SaveExploits1References1
NVD
NVD•added 2025/04/21 6:15 p.m.•21 views

CVE-2025-28103

Incorrect access control in laskBlog v2.6.1 allows attackers to arbitrarily delete user accounts via a crafted request...

6.4CVSS0.00221EPSS
SaveExploits0References2
NVD
NVD•added 2025/04/21 6:15 p.m.•18 views

CVE-2025-28104

Incorrect access control in laskBlog v2.6.1 allows attackers to access all usernames via a crafted input...

9.1CVSS0.00398EPSS
SaveExploits1References2
OSV
OSV•added 2025/04/21 12:00 a.m.•9 views

CVE-2025-28104

Incorrect access control in laskBlog v2.6.1 allows attackers to access all usernames via a crafted input...

9.1CVSS7AI score
SaveExploits0References4
CVE
CVE•added 2025/04/21 12:00 a.m.•75 views

CVE-2025-28104

The CVE-2025-28104 entry concerns FlaskBlog (laskBlog) v2.6.1 with an incorrect access control flaw that lets an attacker retrieve all usernames through a crafted input. Multiple connected sources (Red Hat, NVD, CVE lists, PT Security, CNNVD, OSV, CIRCL, and others) corroborate the issue, describ...

9.1CVSS6.7AI score0.00398EPSS
SaveExploits1References2Affected Software1
CVE
CVE•added 2025/04/21 12:00 a.m.•72 views

CVE-2025-28103

Incorrect access control in laskBlog v2.6.1 allows attackers to arbitrarily delete user accounts via a crafted request...

6.8AI score0.00221EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist•added 2025/04/21 12:00 a.m.•32 views

CVE-2025-28104

Incorrect access control in laskBlog v2.6.1 allows attackers to access all usernames via a crafted input...

0.00398EPSS
SaveExploits1References2
Cvelist
Cvelist•added 2025/04/21 12:00 a.m.•29 views

CVE-2025-28103

Incorrect access control in laskBlog v2.6.1 allows attackers to arbitrarily delete user accounts via a crafted request...

0.00221EPSS
SaveExploits0References2
OSV
OSV•added 2025/04/21 12:00 a.m.•9 views

CVE-2025-28103

Incorrect access control in laskBlog v2.6.1 allows attackers to arbitrarily delete user accounts via a crafted request...

6.4CVSS7AI score
SaveExploits0References4
Vulnrichment
Vulnrichment•added 2025/04/21 12:00 a.m.•11 views

CVE-2025-28104

Incorrect access control in laskBlog v2.6.1 allows attackers to access all usernames via a crafted input...

9AI score0.00398EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment•added 2025/04/21 12:00 a.m.•7 views

CVE-2025-28103

Incorrect access control in laskBlog v2.6.1 allows attackers to arbitrarily delete user accounts via a crafted request...

6.8AI score0.00221EPSS
SaveExploits0References2
Rows per page
Query Builder