199 matches found
EUVD-2023-43128
Malicious code in bioql PyPI...
EUVD-2024-54753
Malicious code in bioql PyPI...
EUVD-2023-43123
Malicious code in bioql PyPI...
EUVD-2023-43126
Malicious code in bioql PyPI...
EUVD-2022-51055
Malicious code in bioql PyPI...
EUVD-2023-45820
Malicious code in bioql PyPI...
EUVD-2023-56778
Malicious code in bioql PyPI...
EUVD-2023-43122
Malicious code in bioql PyPI...
EUVD-2023-43129
Malicious code in bioql PyPI...
CVE-2025-30064 Possibility to generate a session for any user via the "ex:action" parameter after obtaining access to the JWT key
An insufficiently secured internal function allows session generation for arbitrary users. The decodeParam function checks the JWT but does not verify which signing algorithm was used. As a result, an attacker can use the "ex:action" parameter in the VerifyUserByThrustedService function to genera...
CVE-2025-43856
immich is a high performance self-hosted photo and video management solution. Prior to 1.132.0, immich is vulnerable to account hijacking through oauth2, because the state parameter is not being checked. The oauth2 state parameter is similar to a csrf token, so when the user starts the login flow...
CVE-2024-37656
An open redirect vulnerability in gnuboard5 v.5.5.16 allows a remote attacker to obtain sensitive information via the insufficient URL parameter verification in bbs/logout.php...
CVE-2024-37656
An open redirect vulnerability in gnuboard5 v.5.5.16 allows a remote attacker to obtain sensitive information via the insufficient URL parameter verification in bbs/logout.php...
CVE-2024-37656
An open redirect vulnerability in gnuboard5 v.5.5.16 allows a remote attacker to obtain sensitive information via the insufficient URL parameter verification in bbs/logout.php...
PT-2025-28225
Name of the Vulnerable Software and Affected Versions: gnuboard5 version 5.5.16 Description: The issue is related to an open redirect vulnerability that allows a remote attacker to obtain sensitive information. This is due to insufficient URL parameter verification in the "bbs/logout.php" endpoin...
CVE-2024-37656
CVE-2024-37656 affects Gnuboard5 5.5.16. The vulnerability is an open redirect caused by insufficient URL parameter verification in bbs/logout.php , allowing remote attackers to redirect users to arbitrary URLs when a crafted URL parameter is supplied. Exploitation details are not universally des...
CVE-2025-38111 net/mdiobus: Fix potential out-of-bounds read/write access
In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fix potential out-of-bounds read/write access When using publicly available tools like 'mdio-tools' to read/write data from/to network interface and its PHY via mdiobus, there is no verification of parameters passed ...
CVE-2024-56453
Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability...