EUVD-2025-11371

Malicious code in bioql PyPI...

CVE-2025-3687

A vulnerability, which was classified as problematic, has been found in misstt123 oasys 1.0. Affected by this issue is some unknown functionality of the component Sticky Notes Handler. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been...

CVE-2025-3686

A vulnerability classified as problematic was found in misstt123 oasys 1.0. Affected by this vulnerability is the function image of the file /show. The manipulation leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This...

CVE-2025-3686 misstt123 oasys show image path traversal

A vulnerability classified as problematic was found in misstt123 oasys 1.0. Affected by this vulnerability is the function image of the file /show. The manipulation leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This...

CVE-2025-3686

CVE-2025-3686 affects misstt123 oasys 1.0. The vulnerability lies in the image function under the /show path, enabling path traversal. It can be exploited remotely, and public exploit disclosure is noted. Risk context in the sources is limited to the vulnerability description; no versioned fixes ...

CVE-2025-3686 misstt123 oasys show image path traversal

A vulnerability classified as problematic was found in misstt123 oasys 1.0. Affected by this vulnerability is the function image of the file /show. The manipulation leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This...

PT-2025-16588 · Unknown · Misstt123 Oasys

Name of the Vulnerable Software and Affected Versions: misstt123 oasys version 1.0 Description: A vulnerability was found in the function image of the file /show, leading to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This...

oasys 路径遍历漏洞

oasys is an OA office automation system by the individual developer misstt123. A path traversal vulnerability exists in version 1.0 of oasys, which stems from an incorrect operation of the function image in the file /show that results in path traversal...

PT-2025-16589 · Unknown · Misstt123 Oasys

Name of the Vulnerable Software and Affected Versions: misstt123 oasys version 1.0 Description: A vulnerability has been found in the Sticky Notes Handler component of misstt123 oasys, leading to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to th...