CVE-2022-26276

An issue in index.php of OneNav v0.9.14 allows attackers to perform directory traversal...

EUVD-2025-8671

Malicious code in bioql PyPI...

EUVD-2023-59391

Malicious code in bioql PyPI...

CVE-2024-33832

OneNav v0.9.35-20240318 was discovered to contain a Server-Side Request Forgery SSRF via the component /index.php?c=api=getlinkinfo...

CVE-2023-7210

A vulnerability was found in OneNav up to 0.9.33. It has been classified as critical. This affects an unknown part of the file /index.php?c=api of the component API. The manipulation of the argument X-Token leads to improper authentication. It is possible to initiate the attack remotely. The...

CVE-2025-28096

OneNav 1.1.0 is vulnerable to Server-Side Request Forgery SSRF in custom headers...

CVE-2025-28096

OneNav 1.1.0 is vulnerable to Server-Side Request Forgery SSRF in custom headers...

CVE-2025-28097

OneNav 1.1.0 is vulnerable to Cross Site Scripting XSS in custom headers...

PT-2025-13591 · Onenav · Onenav

Name of the Vulnerable Software and Affected Versions: OneNav version 1.1.0 Description: The issue is related to Server-Side Request Forgery SSRF in custom headers. This means an attacker could potentially force the server to make requests to arbitrary domains, which could lead to unauthorized...

CVE-2025-28096

CVE-2025-28096 affects OneNav 1.1.0. The vulnerability is Server-Side Request Forgery (SSRF) in custom headers. CVSSv3.1 base score 5.4 (MEDIUM); attack vector NETWORK; privileges required LOW; user interaction REQUIRED; impact is Confidentiality/Integrity LOW, Availability NONE. Root cause and e...

PT-2022-17760 · Onenav · Onenav

Name of the Vulnerable Software and Affected Versions: OneNav version 0.9.14 Description: An issue in the index.php file allows attackers to perform directory traversal. Recommendations: For OneNav version 0.9.14, update to a version that fixes the issue in index.php to prevent directory traversa...