4968 matches found
CVE-2025-10696 OpenSupports 4.11.0 — Insecure Direct Object Reference in supervised list
OpenSupports exposes an endpoint that allows the list of 'supervised users' for any account to be edited, but it does not validate whether the actor is the owner of that list. A Level 1 staff member can modify the supervision relationship of a third party the target user, who can then view the...
CVE-2025-10696
CVE-2025-10696 affects OpenSupports 4.11.0. An endpoint allows editing the list of 'supervised users' for any account without verifying ownership, enabling a Level 1 staff member to modify the supervision relationship of a target user. This can let the target view tickets belonging to the added s...
EUVD-2024-51596
Malicious code in bioql PyPI...
EUVD-2024-54065
Malicious code in bioql PyPI...
EUVD-2024-24363
Malicious code in bioql PyPI...
EUVD-2023-59098
Malicious code in bioql PyPI...
EUVD-2025-15023
Malicious code in bioql PyPI...
EUVD-2022-34757
Malicious code in bioql PyPI...
EUVD-2024-44447
Malicious code in bioql PyPI...
EUVD-2025-28313
Malicious code in bioql PyPI...
EUVD-2022-31215
Malicious code in bioql PyPI...
EUVD-2024-50621
Malicious code in bioql PyPI...
EUVD-2025-10843
Malicious code in bioql PyPI...
EUVD-2024-49168
Malicious code in bioql PyPI...
EUVD-2024-49816
Malicious code in bioql PyPI...
EUVD-2024-51687
Malicious code in bioql PyPI...
EUVD-2024-27300
Malicious code in bioql PyPI...
EUVD-2024-50761
Malicious code in bioql PyPI...