CVE-2023-50465

MonicaHQ XSS Sfruttamento della XSS di MonicaHQ Crea un account Crea un contatto Nella sezione Documenti, carica un file SVG dannoso root@kitploit: alert"Monicahq XSS Poc"; Accedi al file caricato...

EUVD-2023-35149

Malicious code in bioql PyPI...

EUVD-2023-23323

Malicious code in bioql PyPI...

EUVD-2023-23381

Malicious code in bioql PyPI...

EUVD-2024-52722

Malicious code in bioql PyPI...

EUVD-2024-52721

Malicious code in bioql PyPI...

EUVD-2023-35150

Malicious code in bioql PyPI...

EUVD-2024-52723

Malicious code in bioql PyPI...

EUVD-2024-52724

Malicious code in bioql PyPI...

EUVD-2023-35151

Malicious code in bioql PyPI...

EUVD-2024-52720

Malicious code in bioql PyPI...

CVE-2024-54999

MonicaHQ v4.1.2 was discovered to contain a Client-Side Injection vulnerability via the lastname parameter the General Information module...

CVE-2024-54997

MonicaHQ v4.1.1 was discovered to contain an authenticated Client-Side Injection vulnerability via the entry text field at /journal/entries/ID/edit...

CVE-2024-54998

MonicaHQ v4.1.2 was discovered to contain an authenticated Client-Side Injection vulnerability via the Reason parameter at /people/h:id/debts/create...

CVE-2024-54994

MonicaHQ v4.1.2 was discovered to contain multiple Client-Side Injection vulnerabilities via the firstname and lastname parameters in the Add a new relationship feature...

CVE-2024-54996

MonicaHQ v4.1.2 was discovered to contain multiple authenticated Client-Side Injection vulnerabilities via the title and description parameters at /people/ID/reminders/create...

CVE-2023-30790

MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the people:id/relationships endpoint and firstname and lastname parameter...

CVE-2023-30789

MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the people:id/work endpoint and job and company parameter...

CVE-2023-30787

MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the people:id/introductions endpoint and firstmetadditionalinfo parameter...

CVE-2023-30788

MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the people/add endpoint and nickName, description, lastName, middleName and firstName parameter...