EUVD-2025-12360

Malicious code in bioql PyPI...

EUVD-2025-12356

Malicious code in bioql PyPI...

CVE-2025-28103

Incorrect access control in laskBlog v2.6.1 allows attackers to arbitrarily delete user accounts via a crafted request...

CVE-2025-28104

Incorrect access control in laskBlog v2.6.1 allows attackers to access all usernames via a crafted input...

CVE-2025-28103

Incorrect access control in laskBlog v2.6.1 allows attackers to arbitrarily delete user accounts via a crafted request...

CVE-2025-28104

Incorrect access control in laskBlog v2.6.1 allows attackers to access all usernames via a crafted input...

CVE-2025-28103

Incorrect access control in laskBlog v2.6.1 allows attackers to arbitrarily delete user accounts via a crafted request...

CVE-2025-28104: Improper Access Control

Incorrect access control in laskBlog v2.6.1 allows attackers to access all usernames via a crafted input...

CVE-2025-28103

Incorrect access control in laskBlog v2.6.1 allows attackers to arbitrarily delete user accounts via a crafted request...

CVE-2025-28104

Incorrect access control in laskBlog v2.6.1 allows attackers to access all usernames via a crafted input...

CVE-2025-28103

Incorrect access control in laskBlog v2.6.1 allows attackers to arbitrarily delete user accounts via a crafted request...

CVE-2025-28104

Incorrect access control in laskBlog v2.6.1 allows attackers to access all usernames via a crafted input...

CVE-2025-28104

Incorrect access control in laskBlog v2.6.1 allows attackers to access all usernames via a crafted input...

CVE-2025-28104

Incorrect access control in laskBlog v2.6.1 allows attackers to access all usernames via a crafted input...

CVE-2025-28103

Incorrect access control in laskBlog v2.6.1 allows attackers to arbitrarily delete user accounts via a crafted request...

CVE-2025-28103: Missing Authorization

Incorrect access control in laskBlog v2.6.1 allows attackers to arbitrarily delete user accounts via a crafted request...

CVE-2025-28104

The blogging application laskBlog v2.6.1 contains an improper access control vulnerability (CWE-284). Attackers can bypass security measures and access all usernames by providing a specially crafted input. While no specific patch version is listed, it is recommended to restrict access to sensitiv...

CVE-2025-28103

The laskBlog blogging application, version 2.6.1 , is vulnerable to incorrect access control (CWE-862). This flaw allows an attacker to arbitrarily delete user accounts by sending a crafted request . While no specific patch version is currently identified, it is recommended to restrict access to ...